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(57) Abstract 

A method and system (110) for monitoring both an industrial process and a sensor (104). Iht method and system include determining 
a minimum number of sensor paire needed to test the industrial process as well as the sensor (104) for evaluating the sute of operauon 
of both After obtaining two signals associated with one physical variable, a difference function is obtained by determining the anmmeiic 
difference between the pair of signals over time. A frequency domain transformation is made of the difference function to obtam Founer 
modes describing a composite fimcUon. A residual function is obtained by subtracting the composite function from the difference function 
and the residual function (free of nonwhiic noise) is analyzed by a statisUcal probability ratio test. 
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An Expert System for Testing Industrial Processes and 
Determining Sensor Status 

The United States Government has rights in this invention pursuant to 
Contract W-3 1-109-ENG-38 between the U.S. Department of Energy and the University of 
Chicago. 

The present invention is concerned generally with an expert system and method for 
reliably monitoring industrial processes using a set of sensors. More particularly, the 
invention is concerned with an expert system and method for establishing a network of 
industrial sensors for parallel monitoring of industrial devices. The expert system includes a 
network of highly sensitive pattern recognition rnodules for automated parameter 
surveillance using a sequential probability ratio test. 

Conventional parameter-surveillance schemes are sensitive only to gross changes in 
the mean value of a process, or to large steps or spikes that exceed some threshold limit 
check. These conventional methods suffer firom either large numbers of false alarms (if 
thresholds are set too close to normal operating levels) or a large number of missed (or 
delayed) alarms (if the thresholds are set too expansively). Moreover, most conventional 
methods caimot perceive the onset of a process disturbance or sensor deviation which gives 
rise to a signal below the threshold level for an alarm condition. 

In another conventional monitoring method, the Sequential Probability Ratio Test 
("SPRT") has found wide application as a signal validation tool in the nuclear reactor 
industry. Two features of the SPRT technique make it attractive for parameter surveillance 
and fault detection: (1) early annunciation of the onset of a disturbance in noisy process 
variables, and (2) the SPRT technique has user-specifiable false-alarm and missed-alarm 
probabilities. One important drawback of the SPRT technique that has limited its adaptation 
to a broader range of applications is the fact that its mathematical formalism is foxmded upon 
an assumption that the signals it is monitoring are purely Gaussian, independent (white 
noise) random variables. 
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It is therefore an object of the invention to provide an improved method and system 
for continuous evaluation and/or modification of industrial processes and/or sensors 
monitoring the processes. 

It is also an object of the invention to provide an improved method and system for 
automatically configuring a set of sensors to monitor an industrial process. 

It is another object of the invention to provide a novel method and system for 
statistically processing industrial process signals having virtually any form of noise signal. 

It is a further object of the invention to provide an improved method and system 
employing identical pairs of sensors for obtaining redundant readings of physical processes 
from an industrial process. 

It is still an additional object of the invention to provide a novel method and system 
utilizing a plurality of signal pairs to generate difference functions to be analyzed for alarm 
information. 

It is still a further object of the invention to provide an improved method and system 
including a plurality of single sensors for each industrial device or process for providing a 
real signal characteristic of a process and further providing a predicted sensor signal 
allowing formation of a difference signal between the predicted and real signal for 
subsequent analysis. 

It is also an object of the invention to provide a novel method and system wherein 
difference functions are formed fi-om pairs of sensor signals operating in parallel to monitor 
a plurality of like industrial devices. 

It is yet an additional object of the invention to provide an improved method and 
system utilizing variable and multiple pairs of sensors for determining both sensor 
degradation and industrial process status. 

It is still another object of the invention to provide a novel method and system having 
a plurality of sensors analytically configured by an expert system to establish the minimum 
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array of coupled sensors needed to monitor each sensor as well as the industrial process or 
devices. 

An expert system has been developed that continuously monitors digitized signals 
from a set of sensors which are measuring a variety of physical variables (e.g.. tcmperatiu-e, 
pressure, radiation level, vibration level, etc.). The expert system employs a sensitive 
pattern-recognition technique, the sequential probability ratio test ("SPRT") technique for 
early aimunciation of sensor operability degradation. A SPRT module can monitor output 
from two identical sensors and determine if the statistical quality of the noise associated with 
either signal begins to change. In applications involving two or more industrial devices 
operated in parallel and equipped with identical sensors, a SPRT module applied to pairs of 
sensors monitoring the same physical process on the respective devices will provide sensitive 
annunciation of any physical disturbance affecting one of the devices. If each industrial 
device had only one sensor, it would not be possible for the SPRT technique to distinguish 
between equipment degradation and degradation of the sensor itself. In this application the 
primary benefit of the SPRT method would derive from its very early annunciation of the 
onset of the disturbance. Having this valuable information, additional diagnosis can then be 
performed to check the performance and calibration status of the sensor and to identify the 
root-cause of the signal anomaly. 

For cases where each industrial device is equipped with multiple, redundant sensors, 
one can apply SPRT modules to pairs of sensors on each individual device for sensor- 
operability verification. In this case the expert system provides not only early annunciation 
of the onset of a disturbance, but also can distinguish between equipment degradation and 
degradation of its sensors. Moreover, when the expert system determines that the cause of 
the discrepant signals is due to a degraded sensor, it can identify the specific sensor that has 
failed. 

In a simple generic application involving a single industrial device equipped with 
triply-redundant sensors for measurement of two physical variables, the expert system first 
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identifies the minimum unique set of signal pairs that will be needed for the network of 
interacting SPRT modules. Further, the system can operate using two industrial devices 
working in parallel (e^ jet engines, propeller drive motors on a ship, turbomachinery m an 
industrial plant, etc.). Again the expert system identifies the pair-wise sensor combinations 
that it uses subsequently in building the conditional branching hierarchy for the 
SPRT-module configuration. 

Other objects, features, alternative forms and advantages of the presem invention will 
be readily apparent from the following description of the preferred embodiments thereof, 
taken in conjunction with the accompanying drawings described below. 

Brief Description of the Drawing s 

FIGURE 1 illustrates the specified output of a pump's power output over time; 

FIGURE 2 shows a Fourier composite curve generated usmg the pump spectral output 
of FIG. 1; 

FIGURE 3 illustrates a residual fimction characteristic of the difference between 
FIGS. 1 and 2; 

FIGURE 4 A shows a periodogram of the spectral data of FIG. 1 and FIG. 4B shows a 
periodogram of the residual function of FIG. 3; 

FIGURE 5A illustrates a noise histogram for the pump power output of FIG. I and 
FIG. 5B illustrates a noise histogram for the residual fimction of FIG. 3; 

FIGURE 6A shows an unmodified delayed neutron detector signal from a fu^t sensor 
and FIG. 6B is for a second neutron sensor; FIG. 6C shows a difference fimction 
characteristic of the difference between data in FIG. 6A and 63 and FIG. 6D shows the data 
output from a SPRT analysis with alarm conditions indicated by the diamond symbols; 

FIGURE 7A illustrates an unmodified delayed neutron detector signal from a first 
sensor and FIG. 7B is for a second neutron sensor; FIG. 7C shows a difference fimction for 
the difference between the data of FIG. 7A and 7B and FIG. 7D shows the result of using the 
instant invention to modify the difference fimction to provide data free of serially correlated 
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noise to the SPRT analysis to generate alann information and with alarm conditions 
indicated by the diamond signals; 

FIGURE 8 A and B illustrate a schematic fiinctional flow diagram of the invention 
with FIG. 8A showing a first phase of the method of the invention and FIG. 8B shows the 
application of the method of the invention; 

FIGURE 9 illustrates a plurality of sensors monitoring two physical variables of a 
single industrial device; 

FIGURE 10 illustrates triply-redundant sensors monitoring two physical variables for 
two industrial devices; 

FIGURE 1 1 illustrates an overall system structure employing the sensor array of 
FIG. 10; 

FIGURE 12 illustrates triply-redundant sensors monitoring one physical variable for 
three industrial devices; 

FIGURE 1 3 illustrates a logic diagram and conditional branching structure for an 
equipment surveillance module; and 

FIGURE 14 illustrates a system of industrial devices and development of SPRT 
modules for monitoring the system. 

Detailed Description of Preferred Embodiments 

In a method of the invention signals from industrial process sensors can be used to 
annunciate, modify or terminate degrading or anomalous processes. The sensor signals are 
manipulated to provide input data to a statistical analysis technique, such as a process 
entitled Sequential Probability Ratio Test ("SPRT"). Details of this process and the 
invention therein are disclosed in S.N. 07/827,776 which is incorporated by reference herein 
in its entirety. A further illustration of the use of SPRT for analysis of data bases is set forth 
in U.S. Pat. No. 5,410,422 and copending application of the assignee SN 08/068,713, also 
incorporated by reference herein in their entirety. The procedures followed in a preferred 
methods are shown generally in FIG. 8 and also in FIG. 12. In performing such a preferred 
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analysis of the sensor signals, a dual transfonnation method is performed, insofar as it entaik 
both a frequency-domain transformation of the original time-series data and a subsequent 
time-domain transformation of the resultant data. The data stream that passes through the 
dual frequency-domain, time-domain transformation is then processed with the SPRT 
procedure, which uses a log-likelihood ratio test. A computer software package. 
Appendix A, is also attached hereto covering the SPRT procedure and its implementation in 
the context of, and modified by, the instant invention. 

In one preferred embodiment, successive data observations are performed on a 
discrete process Y, which represents a comparison of the stochastic components of physical 
processes monitored by a sensor, and most preferably pairs of sensors. In practice, the Y 
function is obtained by simply differencing the digitized signals from two respective sensors. 
Let y^ represent a sample from the process Y at time tj, During normal operation with an 
undegraded physical system and with sensors that are functioning within specifications the 
yj, should be normally distributed with mean of zero. Note that if the two signals being 
compared do not have the same nominal mean values (due, for example, to differences in 
calibration), then the input signals will be pre-normalized to the same nominal mean values 
during initial operation. 

In performing the monitoring of industrial processes, the system's purpose is to 
declare a fu-st system, a second system, etc, degraded if the drift in Y is sufficiently large 
that the sequence of observations appears to be distributed about a mean +M or -M, where M 
is oiu- pre-assigned system-disturbance magnitude. We would like to devise a quantitative 
framework that enables us to decide between two hypotheses, namely: 

H, : Y is drawn from a Gaussian probability distribution function ("PDF") with mean 

M and variance a^. 

Hj : Y is drawn from a Gaussian PDF with mean 0 and variance a^. 
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We will suppose that if Hj or Hj is true, we wish to decide for H, or Hj with 
probability (1 - P) or (1 - a), respectively, where a and P represent the error 
(misidentification) probabilities. 

From the conventional, well known theory of Wald, the test depends on the likelihood 
ratio 1„, where 

The probability of observed sequence y„ y^.,., y„ given H, true 

The probabiHty of observed sequence y,, y2..., y„ given Hj true 
After "n" observations have been made, the sequential probability ratio is just the 
product of the probability ratios for each step: 

l„ = (PR,).(PR,>„..CPRn) . (2) 

or 

f(y.|H.) 

where f(y|H) is the distribution of the random variable y. 

Wald's theory operates as follows: Continue sampling as long as A<1„<B. Stop 
sampling and decide as soon as 1„^B, and stop sampling and decide as soon as 1„<A. 
The acceptance thresholds are related to the error (misidentification) probabilities by the 

following expressions: 

A = and B = ^ (4) 
1-a a 

The (user specified) value of a is the probability of accepting Hj when Hj is true (false 
alarm probability). P is the probability of accepting Hj when H, is true (missed alarm 
probability). 
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If we can assume that the random variable is normally distributed, then the 
likelihood that H, is true (i.e.. mean M, variance a') is given by: 

L(y„y=....y.lH,) = ^.exp[.i.(i'S-2i'»M+2; M=)] (5) 



Similarly for (mean 0, variance a^): 

L(y,.y,...yJH,) = ^„exp(-^,t,0 



(6) 



The ratio of (5) and (6) gives the likelihood ratio l„ 
^ = ^''p[-fi'S M(M-2y^)] 



(7) 



Combining (4) and (7), and taking natural logs gives 

Our sequential sampling and decision strategy can be concisely represented as: 

Ifl„<ln-^, Accept H2 (9) 

If In-^ <1„ <ln-^— ^ , Continue Sampling ( i 

1 - a a ^ o V / 

And if i„>ln^— ^, Accept H, (in 

Following Wald's sequential analysis, it is conventional that a decision test based on 
the log likelihood ratio has an optimal property; that is, for given probabihties a and p there 
is no other procedure with at least as low error probabilities or expected risk and with shorter 
length average sampling time. 

A primary limitation that has heretofore precluded the applicability of Wald-type 
binary hypothesis tests for sensor and equipment surveillance strategies lies in the primary 
assumption upon which Wald's theory is predicated; Le^, that the original process Y is strictly 
"white" noise, independently^distributed random data. White noise is thus well knov^Ti to be 
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a signal which is uncorrelated. Such white noise can, for example, include Gaussian noise. It 
is. however, very rare to find physical process variables associated with operating machinery 
that are not contaminated with serially-correlated, deterministic noise components. Serially 
correlated noise components are conventionally known to be signal data whose successive 
time point values are dependent on one another. Noise components include, for example, 
auto-correlated (also known as serially correlated) noise and Markov dependent noise. 
Auto-correlated noise is a known form of noise wherein pairs of correlation coefficients 
describe the time series correlation of various data signal values along the time series of data. 
That is, the data U i, U2. • , Un have correlation coefficients (U], U2). 0^2, U3), . . (Un- 
1, Un) and likewise have correlation coefficients (Ui, U3) (U2, U4), etc. If these data are 
auio-correlated, at least some of the coefficients are non-zero. Markov dependent noise, on 
the other hand, is a very special form of correlation between past and future data signals. 
Rather, given the value of Uk, the values of Un, n > k, do not depend on the values of Uj 
where j < k. This implies the correlation pairs (Uj, Un), given the value U^, are all zero. If, 
however, the present value is imprecise, then the correlation coefficients may be nonzero. 
One form of this invention can overcome this limitation to conventional surveillance 
strategies by integrating the Wald sequential-test approach with a new dual transformation 
technique. This symbiotic combination of frequency-domain transformations and time- 
domain transformations produces a tractable solution to a particularly difficult problem that 
has plagued signal-processing specialists for many years. 

In one preferred embodiment of the method shown in detail in FIG. 8, serially- 
correlated data signals from an industrial process can be rendered amenable to the SPRT 
testing methodology described hereinbefore. This is preferably done by performing a 
frequency-domain transformation of the original difference fimction Y. A particularly 
preferred method of such a frequency transformation is accomplished by generating a 
Fourier series using a set of highest "1" number of modes. Other procedures for rendering 
the data amenable to SPRT methods includes, for example, auto regressive techniques. 



wo 97/14105 PCT/US96/16092 

10 

which can accomplish substantially similar results described herein for Fourier analysis. In 
the preferred approach of Fourier analysis to determine the "1" highest modes (see FIG. 8A): 

= Y + ^ (a„. COS 03„ t + b„ sin a)„t) (12) 

where Sl^I is the mean value of the series, a„ and b„ are the Fourier coefficients 
corresponding to the Fourier frequency ©„, and N is the total number of observations. 
Using the Fourier coefficients, we next generate a composite function, Xp using the values 
of the largest harmonics identified in the Fourier transformation of Y,. The following 
numerical approximation to the Fourier transform is useful in determining the Fourier 
coefficients a„ and b„. Let Xj be the value of X, at the jth time increment. Then assuming 2 
71 periodicity and letting 

0)„ = 27nn/N, the approximation to the Fourier transform yields: 

^ = ^Z ''j^os^n'j ^n, = ^Z 'Ssino)„j (13) 

for 0 <m <N/2. Furthennore, the power spectral density ("PSD") function for the signal is 
given by where 

L-N (14) 

2 

To keep the signal bandwidth as narrow as possible without distorting the PSD, no spectral 
windows or smoothing are used in our implementation of the frequency-domain 
transformation. In analysis of a pumping system of the EBR-II reactor of Argonne National 
Laboratory, the Fourier modes corresponding to the eight highest 1„ provide the amplitudes 
and frequencies contained in X,. In our investigations for the particular pumping system data 
taken, the highest eight 1„ modes were found to give an accurate reconstruction of X, while 
reducing most of the serial correlation for the physical variables studied. In other industrial 
processes, the analysis could result in more or fewer modes being needed to accurately 
construct the functional behavior of a composite curve. Therefore, the number of modes 
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used is a variable which is iterated to minimize the degree of nonwhite noise for any given 
application. As noted in FIG. 8 A a variety of noise tests are applied in order to remove 
serially correlated noise. 

The reconstruction of X, uses the general form of Eqn. (12), where the coefficients 
and frequencies employed are those associated with the eight highest PSD values. This 
yields a Fourier composite curve (see end of flowchart in FIG. 8 A) with essentially the same 
correlation structure and the same mean as Y^, Finally, we generate a discrete residual 
function by differencing corresponding values of Y, and X,. This residual function, which 
is substantially devoid of serially correlated contamination, is then processed with the SPRT 
technique described hereinbefore. 

In a specific example application of the above referenced methodology, certain 
variables were monitored from the Argonne National Laboratory reactor EBR-IL In 
particular, EBR-II reactor coolant pumps (RCPs) and delayed neutron (DN) monitoring 
systems were tested continuously to demonstrate the power and utility of the invention. All 
data used in this investigation were recorded during full-power, steady state operation at 
EBR-II. The data have been digitized at a 2-per-second sampling rate using 2** (16,384) 
observations for each signal of interest. 

FIGS. 1-3 illustrate data associated with the preferred spectral filtering approach as 
applied to the EBR-II primary pump power signal, which measures the power (in kW) 
needed to operate the pump. The basic procedure of FIG. 8 was then followed in the 
analysis. FIG. 1 shows 136 minutes of the original signal as it was digitized at the 2-Hz 
sampling rate. FIG. 2 shows a Fourier composite constructed from the eight most prominent 
harmonics identified in the original signal. The residual function, obtained by subtracting 
the Fourier composite curve from the raw data, is shown in FIG. 3. Periodograms of the raw 
signal and the residual function have been computed and are plotted in FIG. 4. Note the 
presence of eight depressions in the periodogram of the residual function in FIG. 4B, 
corresponding to the most prominent periodicities in the original, unfiltered data. 
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Histograms computed from the raw signal and the residual function are plotted in FIG. 5. 
For each histogram shown we have superimposed a Gaussian curve (solid line) computed 
from a purely Gaussian distribution having the same mean and variance. Comparison of 
FIG. 5 A and 5B provide a clear demonstration of the efifectiveness of the spectral filtering in 
reducing asymmetry in the histogram. Quantitatively, this decreased asymmetry is reflected 
in a decrease in the skewness (or third moment of the noise) from 0. 15 (raw signal) to 0. 10 
(residual function). 

It should be noted here that selective spectral filtering, which we have designed to 
reduce the consequences of serial correlation in our sequential testing scheme, does not 
require that the degree of nonnormality in the data will also be reduced. For many of the 
signals we have investigated at EBR-II, the reduction in serial correlation is, however, 
accompanied by a reduction in the absolute value of the skewness for the residual function. 

To quantitatively evaluate the improvement in whiteness effected by the spectral 
filtering method, we employ the conventional Fisher Kappa white noise test. For each time 
series we compute the Fisher Kappa statistic from the defining equation 



where l(coJ is the PSD function (see Eq. 14) at discrete frequencies cOi^, and 1(L) signifies the 
largest PSD ordinate identified in the stationary time series. 

The Kappa statistic is the ratio of the largest PSD ordinate for the signal to the 
average ordinate for a PSD computed from a signal contaminated with pure white noise. For 
EBR-II the power signal for the pump used in the present example has a K of 1940 and 68.7 
for the raw signal and the residual function, respectively. Thus, we can say that the spectral 
filtering procedure has reduced the degree of nonwhiteness in the signal by a factor of 28. 
Strictly speaking, the residual function is still not a pure white noise process. The 95% 
critical value for Kappa for a time series with 2*^ observations is 12.6. This means that only 
for computed Kappa statistics lower than 12.6 could we accept the null hypothesis that the 
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signal is contaminated by pure white noise. The fact that our residual function is not purely 
white is reasonable on a physical basis because the complex interplay of mechanisms that 
influence the stochastic components of a physical process would not be expected to have a 
purely white correlation structure. The important point, however, is that the reduction in 
nonwhiteness effected by the spectral filtering procedure using only the highest eight 
harmonics in the raw signal has been found to preserve the pre-specified false alarm and 
missed alarm probabilities in the SPRT sequential testing procedure (see below). Table 1 
summarizes the computed Fisher Kappa statistics for thirteen EBR-II plant signals that are 
used in the subject surveillance systems. In every case the table shows a substantial 
improvement in signal whiteness. 

The complete SPRT technique integrates the spectral decomposition and filtering 
process steps described hereinbefore with the known SPRT binary hypothesis procedure. 
The process can be illustratively demonstrated by application of the SPRT technique to two 
redundant delayed neutron detectors (designated DND A and DND B) whose signals were 
archived during long-term normal (i.e.. undegraded) operation with a steady DN source in 
EBR^II. For demonstration purposes a SPRT was designed with a false alarm rate, a, of 
0.01. Although this value is higher than we would designate for a production surveillance 
system, it gives a reasonable frequency of false alarms so that asymptotic values of a can be 
obtained with only tens of thousands of discrete observations. According to the theory of the 
SPRT technique, it can be easily proved that for pure white noise (such as Gaussian), 
independently distributed processes, a provides an upper bound to the probability (per 
observation interval) of obtaining a false alarm- i.e.. obtaining a *'data disturbance" 
aimunciation when, in fact, the signals under surveillance are undegraded. 

FIGS. 6 and 7 illustrate sequences of SPRT results for raw DND signals and for 
spectrally-whitened DND signals, respectively. In FIGS. 6A and 6B, and 7A and 7B, 
respectively, are shown the DN signals from detectors DND-A and DND-B. The 
steady-state values of the signals have been normalized to zero. 
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TABLE! 

Effectiveness of Spectral Filtering for Measured Plant Signals 



Fisher Kappa Test Statistic CN= 1 6,384) 


Plant Variable I.D. 


Raw Signal 


Residua] Function 


Pump 1 Power 


1940 


68.7 


Pump 2 Power 


366 


52.2 


Pump 1 Speed 


181 


25.6 


Pump 2 Speed 


299 


30.9 


Pump 1 Radial Vibr Ctop) 


123 


67.7 


Pump 2 Radial Vibr (top) 


155 


65.4 


Pump 1 Radial Vibr (bottom) 


1520 


290.0 


Pump 2 Radial Vibr (bottom) 


1694 


80.1 


DN Monitor A 


96 


39.4 


DN Monitor B 


81 


44.9 


DN Detector 1 


86 


36.0 


DN Detector 2 


149 


44.1 


DN Detector 3 


13 


8.2 



Normalization to adjust for differences in calibration factor or viewing geometry for 
redundant sensors does not affect the operability of the SPRT. FIGS. 6C and 7C in each 
figure show pointwise differences of signals DND-A and DND-B. It is this difference 
function that is input to the SPRT technique. Output from the SPRT method is shown for a 
250-second segment in FIGS. 6D and 7D, 

Interpretation of the SPRT output in FIGS. 6D and 7D is as follows: When the SPRT 
index reaches a lower threshold. A, one can conclude with a 99% confidence factor that 
there is no degradation in the sensors. For this demonstration A is equal to 4.60, which 
corresponds to false-alarm and missed-alarm probabilities of 0.01. As FIGS. 6D and 7D 
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illustrate, each time the SPRT output data reaches A, it is reset to zero and the surveillance 
continues. 

If the SPRT index drifts in the positive direction and exceeds a positive threshold, B, 
of +4.60, then it can be concluded with a 99% confidence factor that there is degradation in 
at least one of the sensors. Any triggers of the positive threshold are signified with diamond 
symbols in FIGS. 6D and 7D. In this case, since we can certify that the sensors were 
functioning properly during the time period our signals were being archived, any triggers of 
the positive threshold are false alarms. 

If we extend sufiBciently the surveillance experiment illustrated in FIG. 6D, we can 
get an asymptotic estimate of the false alarm probability a. We have performed this exercise 
using lOOO-observation windows, tracking the frequency of false alarm trips in each 
window, then repeating the procedure for a total of sixteen independent windows to get an 
estimate of the variance on this procedure for evaluating the false alarm probability. The 
resulting false-alarm frequency for the raw, unfiltered, signals is a = 0.07330 with a 
variance of 0.000075. The very small variance shows that there would be only a negligible 
improvement in our estimate by extending the experiment to longer data streams. This value 
of a is significantly higher than the design value of a = 0.01, and illustrates the danger of 
blindly applying a SPRT test technique to signals that may be contaminated by excessive 
serial correlation. 

The data output shown in FIG. 7D employs the complete SPRT technique shown 
schematically in FIG. 8. When we repeat the foregoing exercise using 16 independent 
lOOO-observation windows, we obtain an asymptotic cumulative false-alarm frequency of 
0.009142 with a variance of 0.000036. This is less than (i.e. . more conservative than) the 
design value of a = .01, as desired. 

It will be recalled from the description hereinbefore regarding one preferred 
embodiment, we have used the eight most prominent harmonics in the spectral filtration 
stage of the SPRT technique. By repeating the foregoing empirical procedure for evaluating 
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the asymptotic values of a, we have found that eight modes are sufficient for the input 
variables shown in Table I. Furthermore, by simulating subtle degradation in individual 
signals, we have found that the presence of serial correlation in raw signals gives rise to 
excessive missed-alarm probabilities as well. In this case spectral whitening is equally 
effective in ensuring that pre-specified missed-alarm probabilities are not exceeded using the 
SPRT technique. 

In a different form of the invention, it is not necessary to have real sensors paired off 
to form a difference function. Each single sensor can provide a real signal characteristic of 
an ongoing process and a record artificial signal can be generated to allow formation of a 
difference function. Techniques such as an auto regressive moving average (ARMA) 
methodology can be used to provide the appropriate signal, such as a DC level signal, a 
cyclic signal or other predictable signal. Such an ARMA method is a well-known procedure 
for generating artificial signal values, and this method can even be used to learn the 
particular cyclic nature of a process being monitored enabling construction of the artificial 
signal. 

The two signals, one a real sensor signal and the other an artificial signal, can thus be 
used in the same maimer as described hereinbefore for two (paired) real sensor signals. The 
difference function Y is then formed, transformations performed and a residual function is 
determined which is free of serially correlated noise. 

Fourier techniques are very effective in achieving a whitened signal for analysis, but 
there are other means to achieve substantially the same results using a different analytical 
methodology. For example, filtration of serial correlation can be accomphshed by using the 
ARMA method. This ARMA technique estimates the specific correlation structure existing 
between sensor points of an industrial process and utilizes this correlation estimate to 
effectively filter the data sample being evaluated. 

A technique has therefore been devised which integrates firequency-domain filtering 
with sequential testing methodology to provide a solution to a problem that is endemic to 
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industrial signal surveillance. The subject invention particularly allows sensing slow 
degradation that evolves over a long time period (gradual decalibration bias in a sensor, 
appearance of a new radiation source in the presence of a noisy background signal, wear out 
or buildup of a radial nib in rotating machinery, etc.). The system thus can alert the operator 
of the incipience or onset of the disturbance long before it would be apparent to visual 
inspection of strip chart or CRT signal traces, and well before conventional threshold limit 
checks would be tripped. This permits the operator to terminate, modify or avoid events that 
might otherwise challenge technical specification guidelines or availability goals. Thus, in 
many cases the operator can schedule corrective actions (sensor replacement or recalibration; 
component adjustment, alignment, or rebalancing; etc.) to be performed during a scheduled 
system outage. 

Another important feature of the technique which distinguishes it from conventional 
methods is the built-in quantitative false-alarm and missed-alarm probabiUties. This is quite 
imponant in the context of high-risk industrial processes and applications. The invention 
makes it possible to apply formal reliability analysis methods to an overall system 
comprising a network of interacting SPRT modules that are simultaneously monitoring a 
variety of plan variables. This amenability to formal reliability analysis methodology will, 
for example, greatly enhance the process of granting approval for nuclear-plant applications 
of the invention, a system that can potentially save a utility millions of dollars per year per 
reactor. 

In another form of the invention, an artificial-intelligence based expert system 100 
(see FIG. 12) has been developed for automatically configuring a set of sensors A, B, C and 
D to perform signal validation and sensor-operability surveillance in industrial applications 
that require high reliability, high sensitivity annunciation of degraded sensors, discrepant 
signals, or the onset of process anomalies. This expert system 100 comprises an 
interconnected network of high sensitivity pattern-recognition modules 102 (see FIGS. 9-11). 
The modules 102 embody the SPRT methodology described hereinbefore for automated 
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parameter surveillance. The SPRT method examines the noise characteristics of signals 
from identical pairs of sensors 1 04 deployed for redundant readings of continuous physical 
processes from a particular industrial device 106. The comparative analysis of the noise 
characteristics of a pair of signals, as opposed to their mean values, permits an early 
identification of a disturbance prior to significant (grossly observable) changes in the 
operating state of the process. As described in more detail hereinbefore, the SPRT method 
provides a superior surveillance tool because it is sensitive not only to disturbances in signal 
mean, but also to very subtle changes in the skewness, bias, or variance of the stochastic 
noise patterns associated with monitored signals. The use of tv^o or more identical ones of 
the sensors 104 also permits the validation of these sensors 104, Le,, determines if the 
indicated disturbance is due to a change in the physical process or to a fault in either of the 
sensors 104. 

For sudden, gross failures of one of the sensors 104 or components of the system 100, 
the SPRT module 102 would armunciate the disturbance as fast as a conventional threshold 
limit check. However, for slow degradation that evolves over a long time period (gradual 
decalibration bias in a sensor, wearout or buildup of a radial rub in rotating machinery, etc.), 
the SPRT module 102 provides the earliest possible annunciation of the onset of anomalous 
patterns in physical process variables. The SPRT-based expert system 100 can alert the 
operator to the incipience of the disturbance long before it would be apparent to visual 
inspection of strip chart or CRT signal traces, and well before conventional threshold limit 
checks would be tripped. This permits the operator to terminate or avoid events that might 
otherwise challenge technical specification guidelines or availability goals, and in many 
cases, to schedule corrective actions (sensor replacement or recalibration; component 
adjustment, alignment, or rebalancing; etc.) to be performed during a scheduled system 
outage. 

The expert system 100 embodies the logic rules that convey to the operator the status 
of the sensors 104 and the industrial devices 106 connected to a SPRT network 108 (see 
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FIG. 12). When one or more of the SPRT modules 102 indicate a disturbance in sensor 
signals ( i.e., the SPRT modules 102 trip) the expert system 100 determines which of the 
sensors 104 and/or the devices 106 are affected. The expert system 100 is designed to work 
with any network of the SPRT modules 102, encompassing any number of the industrial 
devices 106, process variables, and redundant ones of the sensors 104. 

In a most preferred embodiment, the expert system 100 is operated using computer 
software written in the well known "LISP" language (see Appendix B attached hereto). In 
this embodiment, the expert system 100 is divided into two segments which act as pre- and 
post-processors for the SPRT module computer code. The pre-processor section is used to 
set up operation of the SPRT network 108 and forge connections between the sensor data 
stream and the SPRT modules 102. The post-processor section contains the logic rules 
which interpret the output of the SPRT modules 102. 

The logic for the expert system 100 depends upon the grouping of the SPRT 
modules 102. Each of the SPRT modules 102 monitors two identical sensors 104 which 
measure a physical process variable. (See FIGS. 9-11.) The two sensors can either be 
redundant sensors 104 on one of the industrial devices 106 or separate sensors 104 on two 
identical ones of the industrial devices 106 that are operated in parallel. A group of the 
modules 102 entails all of the connections between the identical sensors 104 for a given 
physical variable on a group of the industrial devices 106. The number of the modules 102 
in a group depends upon the number of identical devices 106 that are operated in parallel and 
the number of redundant sensors 104 on each device 106 which observe the response of a 
physical variable. For instance, suppose the expert system 100 is to be applied to an 
industrial system which contains three identical coolant pumps (not shown). Furthennore, 
suppose each coolant pump contains two redundant pressure transducers and one 
thermocouple (not shown). This system 100 would be modeled by two groups of the 
modules 102. The first group of the modules 102 would connect the six total pressure 
transducers which measure pump pressure. The second group of the modules 102 would 
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connect the three total thennocouples which measure coolant temperature. For a given 
group of related sensors 104, the data from each of the sensors 104 are fed into the 
modules 102. Since the module 102 perfonns a comparison test between die two 
sensors 104. die tripping of both of die modules 102 connected to die sensor 104 (in die 
absence of odier tripped modules 102 in die same group) is a necessary and sufficient 
condition to conclude diat die sensor 104 has failed. Therefore, for a group of related 
sensors 104. die minimum number of modules 102 needed to enable sensor detection is die 
same as die number of die sensors 104 in die group. For die example discussed above, die 
number of die modules 102 in die first group would be six, and die number of die 
modules 102 in the second group would be three. 

In applications involving two or more identical ones of die industrial devices 106 
operated in parallel and equipped widi identical sensors 104, die module 102 applied to pairs 
of die sensors 104 monitoring die same physical process on die respective devices 106 will 
provide sensitive annunciation of any physical dishirbance affecting one of die devices 106. 
If each of die devices 106 has only one of die sensors 104 diough, it would not be possible 
for die expert system 100 to distinguish between device degradation and sensor degradation. 
In diis case, die primary benefit of die mediod would derive from its very early annunciation 
of a disturbance. For cases in which each of die industrial devices 106 is equipped widi 
multiple, redundant sensors 104. die modules 102 can be applied to pairs of die sensors 104 
on each of die industrial devices 106 for sensor-operability verification. In diis case, die 
expert system 100 not only provides early annunciation of a disturbance, but can also 
distinguish between device degradation and sensor degradation. Moreover, when die expert 
system 100 determines diat die cause of die discrepant signals is due to a degraded one of die 
sensors 104, it can identify die specific sensor 104 tiiat has failed. 

FIG. 9 illustrates die first stage of die expert system 100 processing for a simple 
generic application involving a single one of die industrial devices 106 diat is equipped widi 
triply-redundant sensors 104 for measurement of two physical variables. The expert 
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system 100 first identifies the minimum unique set of signal pairs that will be needed for the 
network of interacting modules 102. FIG. 10 illustrates a generic application involving two 
of the industrial devices 106 that are operated in parallel. For this example, it is also 
assumed that triply-redundant sensors 104 are available for measuring each of two separate 
physical variables. Once again, the expert system 100 identifies the pair-wise sensor 
combinations that it uses in building the conditional branching hierarchy for the module 
configuration. FIG. 11 illustrates a generic application involving three industrial devices 106 
that are operated in parallel. Triply-redundant sensors 104 for measuring one physical 
variable are assumed. The figure shows the pair-wise sensor combinations identified by the 
expert system 100 for building the conditional branching hierarchy. These figures also 
depict the three main branches for the logic rules contained in the expert system 100: a 
grouping of the modules 102 based on a single one of the industrial devices 106, two 
identical devices 106 operated in parallel or multiple (three or more) devices 106 operated in 
parallel. The expert system 100 however is not limited to only one of the three cases at a 
time. The industrial system 100 modeled can contain any number of independent single 
devices 106, doubly-redundant devices 106 and multiply-redundant devices 106. Each 
device group, in turn, may contain any number of redundant sensors 104 and any nimiber of 
physical variables. 

The expert system 100 is implemented using a stand-alone computer program set 
forth in the previously referenced Appendix B. In operation after the program initialization 
information has been gathered, the computer program prompts the user for the name of a 
data file that simulates the real-time behavior of the SPRT network 108 connected to the 
system 100 including the industrial devices 106. The SPRT data file contains space- 
delimited data values that represent the status of a corresponding module 102. The 
module 102 has two states: a 0 (non-tripped) state indicates that the signals from the 
sensors 104 monitored by the module 102 have not diverged from each other, while 
a 1 (tripped) state indicates that the signals from the sensors 104 monitored by the 
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module 102 have diverged from each other enough to be detected by the SPRT algorithm. 
Each line of data in the file represents the status of a group of related modules 102 at a given 
time. Each line contains a list of O's and I's that coirespond to the state of all the 
modules 102 in the group. The number of groups in the network 108 depends upon the 
number of groups of identical devices 106 and the number of process variables monitored on 
each group of devices 106. If the network 108 contains more than one group of related 
modules 102. the data file will contain a corresponding number of lines to represent the 
status of all the modules 102 in the network 108 at a given time. For instance, if a system of 
the industrial devices 106 is modeled by four SPRT groups, the output file will contain four 
lines of SPRT data for each timeslep in the simulation. 

Execution of the program of Appendix B includes two procedures. The fu-st 
procedure (SPRT_Expert) provides the instructions for the control of program execution and 
corresponds to the pre-processor section in an integrated SPRT expert system/SPRT module 
code. When executed, the procedure first prompts the user to specify the number of device 
groups in the application. A device group is a group of identical industrial devices 106 (one 
or more) that are operated in parallel and are equipped with redundant ones of the 
sensprs 104. A device group can contain one or more physical variables. The program then 
prompts the user for the following information for each of the device groups: 

(i) The name of the device group. 

(ii) The number of physical variables in the device group. 

(iii) The name of the fu^st physical variable in the device group. 

(iv) The number of redundant sensors 104 on each device 1 06 that measures the 
fu^t physical variable. 

If the device group contains more than one physical variable, the program will loop through 
steps (iii) and (iv) to obtain input data for the remaining physical variables. The number of 
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SPRT groups in the application is equal to the sum of the number of physical variables for 
each of the device groups. Namely, 

Once the program has collected the required data to set up the system, it prompts the user for 
the name of the SPRT data file. Execution of the program consists of reading the SPRT 
status values from the data file and evaluating the status of the devices 106 and sensors 104 
in the application, as inferred from the SPRT data. Program execution is controlled by a 
"do" loop. For each pass through the loop, the program reads the data which model the state 
of each of the SPRT modules 102 in the network at a given time. The SPRT data are then 
passed to the Analyze procedure. If any of the SPRT modules 102 in the application has 
tripped (re,. SPRT value = 1), the Analyze procedure determines which device(s) 106 and/or 
sensor(s) 104) are affected and reports their status. Looping continues until the end of the 
data file is reached, upon which the program terminates. 

The Analyze procedure contains the logic rules for the expert system 100. It 
corresponds to the post-processor section in an integrated SPRT expert system/SPRT module 
code. It is passed lists of O^s and Vs that represent the stanis of the SPRT modules 102 at any 
given timestep of the SPRT program. The number of lists passed to Analyze equals the 
number of SPRT groups. For each SPRT group, the procedure converts the SPRT data into a 
list of tripped SPRT modules 102. From the list of tripped SPRT modules 102, the status of 
the devices 106. and the sensors 104 modeled by the SPRT group are evaluated. Based on 
the number of devices 106 and the redundant sensors 104 in a SPRT group, the expert 
system 100 can determine which of the device(s) 106 and/or the sensors(s) 104 have failed. 
In some cases (e^, if the number of the tripped modules 102 is one, or if the number of 
redundant sensors 104 in a group is one), the expert system 100 cannot conclude that the 
device 106 or the sensor 104 has failed, but can only signal that device or sensor failure is 
possible. Within Analyze, the logic rules are encapsulated by three procedures: 
SingleDevice, for a SPRT group applied to a single one of the industrial devices 106, 
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DualDevice, for , SPRT group applied .o ,wo parallely-opemed is^^ levies .06. and 
MuldpIeDevice, fo, a SPRT group applied ,o a group of toe or ™ore parallely-operatid 

industrial devices 106. 

The followmg nonliiruting example is illustrative of implementation of the expert 

system. 

Example 

71.= development of a nenvork of U,. SPRT modules 102 for a general system 1 10 of 
U,e indusWal devrees ,06 and d,e .«i„„ of d,e corresponding logic r^es are revealed by an 
example calcularion^ The sysiem 1 10 of industtal devices 106 and a da« file represendng 
dre ,rans,e„. behavior of d,e s«,sors 104 in d,e system 1 10 were created. A diagram of dte 
system 1 10 ts shown in FIO. 14 and contains two groups of the industrial devtces 106 A 
first group 1 12 (identified as mrbine devices) contams tftree of the identical devices 106 
Each ntrbtne is equipped wid> d,e sensors 104 to measure the steam temperamre and steam 
pressure physical vanables. There are two redundant sensors 104 on each mrbine reading 
dte steam temperamre. while one of U,e sensors 104 measures the steam ptessure A second 
devtce group 114 consists of two coolant pumps. One physical variable, coolant flowrate is 
gauged on each coolant ptnnp by a group of four redundant sensor. 104. TTte corresponding 
network of SPRT modules 102 for d,e system 1 10 is shown. Three groups of dte SPRT 
modules .02 a,, required; wrd, six of the modules 102 in a firs, module group for U,e steam 
.emperantre sensors on the turbines, three modules 102 in the second module group for the 
steam pressure sensors .04 on the htrbines, and eight of tfte modules .02 in dte third group 
of dte modules 102 for the coolant flowrate sensors 104 on d,e coolant pumps. 

A complete listing of the output from the test run follows hereinafter. Input entered 
by the user is identified by bold type. From the PC-Scheme prompt, the prog,«n is executed 
by first loadmg it into memoty, and then calling the main procedure (SPRT Expen) After 
-hsplaying a tide banner, the code asks d,e user to specify d,e number of device groups in the 
network. 
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[2] (load "SPRTEXPT.S") 
OK 

[3] (SPRT_Expert) 

SPRT Expert System Simulation Program 
Enter the number of device groups -> 2 

For each device group in the network, the program requests that the user supply the 
name of the devices in the group, the number of identical devices, the number of physical 
variables in the device group, and the names and numbers of redundant sensors for each 
physical variable. The input entered for device group M 1 is: 

DEVICE NAME: 

Enter the name of device group number 1 -> TURBDVE 
DEVICE NUMBER: 

Enter the number of devices in the TURBINE 
device group -> 3 

PHYSICAL VARIABLE NUMBER: 

Enter the number of physical variables in the TURBINE 

device group -> 2 

PHYSICAL VARIABLE NAME: 
Enter the name of physical variable number 1 
of the TURBINE device group -> STEAM TEMPERATURE 
SENSOR NUMBER: 

Enter the number of redundant sensors for the STEAM TEMPERATURE 

physical variable in the TURBINE device group -> 2 
PHYSICAL VARIABLE NAME: 
Enter the name of physical variable number 2 
of the TURBINE device group -> STEAM PRESSURE 
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SENSOR NUMBER: 

Enter the number of redundant sensors for the STEAM PRESSURE 
physical variable in the TURBINE device group -> l 
The input entered for device group #2 is: 
DEVICE NAME: 

Enter the name of device group number 2 -> COOLANT PUMP 
DEVICE NUMBER: 

Enter the number of devices in the COOLANT PUMP 
device group -> 2 

PHYSICAL VARIABLE NUMBER: 

Enter the number of physical variables in the COOLANT PUMP 
device group -> 1 

PliYSICAL VARIABLE NAME: 

Enter the name of physical variable number 1 

of the COOLANT PUMP device group COOLANT FLOWRATE 
SENSOR NUMBER: 

Enter the number of redundant sensors for the COOLANT FLOWRATE 
physical variable in the COOLANT PUMP device group -> 4 
Once the input data for each device group have been obtained, the program displays a 
summary of the SPRT network, by identifying the SPRT groups in the network. 
The number of SPRT Groups in the simulation is 3. 
SPRT Group #1 

contains 3 TURBINE industrial devices 

with 2 STEAM TEMPERATURE redundant sensors. 

SPRT Group #2 

contains 3 TURBINE industrial devices 
with 1 STEAM PRESSURE redundant sensor 
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SPRT Group #3 

contains 2 COOLANT PUMP industrial devices 
with 4 COOLANT FLOWRATE redundant sensors. 

The final input item required is the name of the data file containing the status values 
for the SPRT modules in the network. 
Enter filename for SPRT data -> TEST.DAT 

The analysis of the SPRT data is controlled by a do loop. For each pass through the 
loop, the program retrieves a line of data for each SPRT group in the network. Each block of 
data retrieved firom the file represents the status of all SPRT modules in the network at a 
moment in time. The program analyzes each block of data to determine whether the SPRT 
status values imply device and/or sensor failures. 

In the test calculation, the first block of data retrieved from the TEST.DAT file is: 
000000 
000 

00000000 

Analyzing this data, the program reports that: 
Analyzing SPRT data set number I 
SPRT Group #1: 
No SPRTs have tripped. 
SPRT Group #2: 
No SPRTs have tripped. 
SPRT Group #3: 
No SPRTs have tripped. 
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The second block of data retrieved from the file contains some tripped SPRT 
modules: 

100000 
000 

0 1000000 

Since only one module has tripped in SPRT groups #1 and #3. the program can conclude 
only that some device and/or sensor failures may have occurred. The program identifies 
which modules have tripped and which devices or sensors are affected. 

Analyzing SPRT data set number 2 
SPRT Group #1: 

For the STEAM TEMPERATURE physical variable of the TURBINE devices: 

These 1 of the 6 SPRTs have tripped -> 

Al-Bl 

DEVICE NUMBER A OR DEVICE NUMBER B OF THE TURBINE DEVICES. 

SENSOR NUMBER AI. OR SENSOR NUMBER Bl MAY BE FAILING *•* 
SPRT Group #2: 
No SPRTs have tripped. 
SPRT Group #3: 

For the COOLANT FLOWRATE physical variable of the COOLANT PUMP devices: 
One SPRT has tripped -> A 1 -B2 

ONE OR BOTH OF THE COOLANT PUMP DEVICES. 

SENSOR NUMBER Al OR SENSOR NUMBER B2 MAY BE FAILING 
In the third block of data, additional modules have tripped. 
100 100 
00 1 

0 1 1 00000 
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In SPRT group #1, two modules have tripped. Since both of the sensors on device A and 
both of the sensors on device B are affected, the code concludes that one of the two devices 
has failed. It cannot identify which of the devices has failed at this time though. In SPRT 
group #2, one module has tripped. The code concludes that one of the sensors or devices 
may be failing. Since both modules connected to sensor B2 in SPRT group #3 have tripped, 
the code concludes that sensor 83 has failed. 

Analyzing SPRT data set number 3 
SPRT Group #1: 

For the STEAM TEMPERATURE physical variable of the TURBINE devices: 
These 2 of the 6 SPRTs have tripped - 
Al-Bl A2-B2 

• • ♦ DEVICE NTUMBER A OR DEVICE NUMBER B OF THE TURBINE 

DEVICES HAS FAILED *** 
SPRT Group #2: 

For the STEAM PRESSURE physical variable of the TURBINE devices: 

These 1 of the 3 SPRTs have tripped - 

CNAl 

* • * DEVICE NUMBER C OR DEVICE NUMBER A OF THE TURBINE DEVICES, 

SENSOR NUMBER CI, OR SENSOR NUMBER Al MAY BE FAILING 
SPRT Group #3: 

For the COOLANT FLOWRATE physical variable of the COOLANT PUMP devices: 
These 2 of the 8 SPRTs have tripped - 
A1-B2 A2-B2 

SENSOR NUMBER B2 HAS FAILED ♦** 
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More modules have tripped in the fourth block of data. 

10 1 100 
0 1 1 

0 1100100 

Since three of the four modules connected to the sensors in device A of SPRT group #1 have 
tnpped. the code concludes that device A has failed. In SPRT group #2. two of the diree 
modules have tripped. But since there is only one sensor per device in this group the code 
can only conclude that either a device or sensor failure has occurred. In SPRT group U3 
three modules have tripped. The code concludes that one of the two devices has failed. ' 

Analyzing SPRT data set number 4 
SPRT Group #1: 

For the STEAM TEMPERATURE physical variable of the TURBINE devices: 
These 3 of the 6 SPRTs have tripped -> 
Al-Bl Cl-Al A2-B2 

DEVICE NUMBER A OF THE TURBINE DEVICES HAS FAILED 
SPRT Group #2: 

For the STEAM PRESSURE physical variable of the TURBINE devices: 
These 2 of the 3 SPRTs have tripped -> 
Bl-Cl Cl-Al 

• • • DEVICE NUMBER C OF THE TURBINE DEVICES. 

OR SENSOR NUMBER CI HAS FAILED 
SPRT Group «: 

For the COOLANT FLOWRATE physical variable of the COOLANT PUMP devices: 
These 3 of the 8 SPRTs have tripped -> 
AI-B2 A2-B2 A3.B4 

ONE OR BOTH OF THE COOLANT PUMP DEVICES HAVE FAILED 
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Notice that two of the tripped modules in SPRT group #3 implicate a failure of sensor B2, 
the conclusion reached by the analysis of the third block of data. But since an additional 
module has tripped, the code changes its conclusion from a sensor failure to a failure of one 
or both of the devices. Although the third module trip may be a spurious trip (i.e.. the SPRT 
modules have a fmite false alarm probability) which would mean that the earlier conclusion 
still holds, the code conservatively concludes that none of the trips are spurious and decides 
that a device failure has occurred. The code assumes that no module trip is spurious, which 
causes the code to consistently pick the most conservative conclusion when more than one 
conclusion can be deduced from the data. 

The fifth and last set of data in the file contains additional module trips. 
111100 
I 1 1 

0 1100110. 

The additional trips in SPRT group # 1 cause the code to conclude that more than one device 
in the group is affected. In SPRT group #2, all three modules in the group have tripped. 
Whenever all SPRT modules in a group trip, the code concludes that all devices in the group 
have failed; In SPRT group #3 the additional module trip does not change the conclusion, 
since the worst-case conclusion (i.e.. one or both of the devices in the group have failed) for 
the group has already been reached. 
Analyzing SPRT data set number 5 
SPRT Group #1: 

For the STEAM TEMPERATURE physical variable of the TURBINE devices: 
These 4 of the 6 SPRTs have tripped -> 
Al-Bl Bl-Cl Cl-Al A2-B2 

•** DEVICE NUMBER B OF THE TURBINE DEVICES HAS FAILED 

SENSOR NUMBER CI HAS FAILED 
* DEVICE NUMBER A OF THE TURBINE DEVICES HAS FAILED 



wo 97/14105 

PCT/US96/lfi092 

32 

SPRT Group U2: 

For the STEAM PRESSURE physical variable of the TURBINE devices; 
All 3 SPRTs have tripped 

ALL 3 OF THE TURBINE DEVICES HAVE FAILED 
SPRT Group «: 

For the COOLANT FLOWRATE physical variable of the COOLANT PUMP devices: 
These 4 of the 8 SPRTs have tripped -> 
A1-B2 A2-B2 A3-B4 A4-B4 

— ONE OR BOTH OF THE COOLANT PUMP DEVICES HAVE FAILED — 
Notice that the SPRT ^oup #1, the code concludes that devices A and B have failed, but for 
device C it concludes that only one of its sensors has failed. For device groups containing 
mulnple devices ti.ee or more identical devices), tite code applies its logic rules to each 
of ti.e devces independently. Since for devices A and B boti. of ti.eir sensors are involved, 
the code concludes tiiat the devices have failed. For device C only ti,e first sensor is 
involved, ti^us ti,e code concludes tiiat only the first sensor on ti,e device has failed The 
code reaches the end of the file after analyzing the fifth block of data, causing the code to 
temtinate. For SPRT group #3. a failure of one or bod. of the devices is indicated, although 
the patten, of tripped modules can also be interpreted as a simultaneous failure of sensors B2 
and 84. The code indicates a device failure because concmrent failures of two or more 
sensors in a group is deemed to be highly improbable. 

While preferred embodiments of the invention have been shown and described, it will 
be clear to those skilled in the art that various changes and modifications can be made 
witiiout departing from the invention in its broader aspects as set forth in die claims provided 
hereinafter. 
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tinciudc <spdio.h> 

mAint) ' SQPr^ARE APPENDIX /f^ 

( 

scxcic csurle tr.resr. • 4.6; 

doubit diii 1 , dif 1 2 , di-r 2 , diir 4 , = . di-rr 5 , dii^T ; 
doublt spinl^sprTia^scr-ii^sprH^spr^S. arprzS, acr^l, cunapr^; 
double pi. p2,F2.p'^,pc.p6,?7,?0; 
iJl- tocajja • 0; 
ist Rum 0; 
inz Ala • 0; 

dcuhie vl, v2. vj, v4, v5, vo : 

coublft SLl.e^.ou.nil.nif .sto; 

dcublc si=. gl , c2 , c2 , c4 , ^5 , c6 , g: ; 

Icr.g accdl - 12; 

long sccd2 - 23; 

Icr.g 3ecd2 • 27; 

Icng seed* • 31; 

long seed; - 12: 

Isng saedfi - 12; 

cxzcrr. void ncrr-^ir.U; 

e;;rerr. void apri ( ) ; 

/» Caz t.^e oAzamectrs needed ir. the pzccran '/ 
crinci r\nlncut the s«nsor irilMze mtcnicuda «":'.."); 

^P- — # variances o£ aigntii 1..6 sapartted by cc.t=a3 . ); 

'acani(— ili,%ir. 'ili. Hii, \li, Ui", i vl . 4v2 , 6 v3 , < v4. 4 vi , fiv6) ; 
or-nci(-\r.Ir.ouc Che mein of signals 1.-5 separated by coronis."); 
3cani t"%l-, ^ii* ^1-. ^1-"' Iffil. fiffli* ira"!* Cmf , fimo) ; 



rilarzi - fspen("ilarr.£.iiit'\ "V) ; 

rrLnzi(-\nPuc-ng ini-ai scuff in file."); _ 

f^rir.zi (fale^. "\n£l-spizi=ii rsiiiriiiiy - csn;:.guzscicn 1 J ; 

fprincf (falarn, -\n • 

rrrincf (falarni, "\n**nscr Taiiurt nagnicud* srii - Vlf'.sfri); 
fprintf (ralarn, "\nSignAi Al : mean n:u-%lf variance v-^lf " , ml, vl i ; 
fprincf (filarrs, -\nSignAi kl\ mean mu-%lf variance v-%lf ",m2, v2J ; 
f-srincf (f alarn, "\nSignal Bl : mean mu-'iii variance v^li" , m2 , v3 1 ; 
firiazf (£ alarm. **\nSignai S2 : mean mu«%lf variance v-^df " ,ni4 , v4 I ; 
cprintf (£alar=i, -\nSignal CI: aean mu-*lf variance ^^1^,.-!* . v5) ; 
fDrincf Ifaiam. "\nSignal C2: mean mu-^lf variance v-\lf "^mS, v6) ; 
fprintl (faiarz:. "\n \n \ft \n"); 

princf ("NnStarxlng sprc ") ; 

pi - 0.0;p2 - 0.0;o3 - 0.0;?4 - 0.0;p5 - 0.0;po - 0,0;p7 - 0.0;pO - 0.0 
gi - afm/ (vl-»»v2) ;g2 - srm/ <v3-v4 ) ;g2 - 3^^/ (v:*v61 ; 

g4 - sfa/ (V 11-/3 1 ;g£ - sfm/ (v2*v4) ;g6 - sfni/ (v5-^vr ) ;g7 - slsi/ (v4^v6) ; 
while (nuci < 500) 
( 

num -r-l; 
sprtl - 0.0; 
sprz2 - 0.0; 
sprz3 - 0.0; 
«prt4 - 0.0; 
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sprzS •0,0; 
aprrfi - 0.0; 
sprt7 - .0,0; 
duiuprc * 0.0; 
ain - 0; 

( 

p.cr=a i:i ( S , i sici , V J , v< , rzi , R^. , 4 5ftftc2 , • * e-c-. ) 

ciiil - si^l - sio2; 
di-12 • slqj - sigH; 
ciiiS - sic£ - sLqi: 

sprr (sim,c2,c.nresa,ciiri2, t jcrt2, 4cu.xsprt) ; 

spr; ( 5 ia, gi , Chreah , cii£3 , t jprzi , tdumstarr ) ; 
) whiJ.«(t»prrl < thr«ah) ii (sprt2 < thresh) fii (scr^j < c-— ahn • 
i.^((»pr^l — thresh) 1| (iprt2 — chresii) || (sprl^ — thrslh?) 

printi ("\n2rr^i-iii,st:r^2-Vli,s=ri3-^li",srr- • * •> s- — ■ 

ii tsprzl — chreah) ' " ' ' ** r---* . 

CO 

( 

ii ({sprt2 < cr.resh) a (sm2 > -^r.r-s.-}) 

( 



<ii--2 - siiyi - sict; 

sprt (srr.,g2, tr.rssr., cir^:. isp—: . iiu.T.srrtj : 



} 

Li ((sn — 3 < :.^.reihi i<i iz'zz2 > -i^reshn 
( 

dilij - 5i,gi - sica; 

^sprx (si=i.<j2, t:tresh,cii;2,4 5przj, idunaprt) ; 

) while ({ (sprt2<ihr«3hl «4 t4pri2>-chresh) 1 || 

( ($prij<thr=ah) ii ( Sr"3>-chrt5h) | j ; 
elae ii (sprt2 threshJ 
ca 

i 

ii {(spr-l < chreihl «; (srr^l > -chr-sh) l 
( 

ncrr-.risiftaigl. ;3ic2, vl, v2.zul,r.2, Cseecl, i se*'^' ) • 
Giiil - 3ici - 5ic2; 

^spci iaia,gi, c.^reah, diiil, iarrri, fid\rzspr- : : 
ii^t{3pra2 < thresh) 44 (aprtj > -chresh) ) 

norx3i:n{4siq;, 4sig6, vc. v6,ai.sio, 4sesd^« 4se-cfil • 
dLtil - sig5 - -ig^; 

^sprt tsiTi,g3, tnrtsh, Cirr2, 4 3prt;, 4<iumsprr) ; 

1 whiia ( ( (sprtKthrashJ 44 ^sp^^l>-threshl ) M 

C t3prz3<tnresh] 44 (3t:r^3>-t:ir*sh 1 ) j • 
ciae ii (sprtj — thresh) 
do 

{ 

ii ((apct2 < threahi 44 (spr:2 > -thresh) i 
I 

norni3im{43ig2, fisig4, v3, v4,nu,m4, t3esd2 , 4seccl4) • 
diii2 - sig3 - sigi; 

spct I5fm,g2,tiire3ft.diii2*4jprt2,4dura3crz) ; 

) 

ii ((sprti < thresh) 44 (spctl > -thresh)) 

noc35iA(4sigl, 4sig2, vl, v2, na,m2, 4acedl, «3eed2) ; 
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do 

t . -. 1 m** i »e«ci, tift*^^ • 

no«i.-:il"icl,iSi.c3,vUv^,m.,rD-,t-e«c-, 

) while USr—^ * ttizsshl (Sr--*» 
( 

else ((«=z2 - t-r«-J ..(Sr--1 

diii* - - .4.liu.•«=r-.): 



( 



ec 

I 



1 while ((3srz5 < thresn) S6 
a (apn5 — tbrssh) Aim - 

ell. ii («P---\r, !fr"-^'-"sor--i.s---5>; 
princfC"\nAlara - td",ai«l.- 



•Ise 

( 

do 



fvarasiffl (taigJr t**?-'^**' 

) wftiic((sprt6 < thresh) t- isp=-' 
(spr^6 < thresh) 

do 

nornisim(4siq<«4aigorvH,vtt, 
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) while (dpcw. < thrtsh) a tsprc7 > -thres t: 
LI lsori7 — threah) Ain - 6; ^ 

1 

elaa t£ (sorrS — chresh) iim • «; 
prinrf ("\r.s^rr6-ali, srrr7-^ir", s?rc5,4prz7) ; 

I 

else tiJi - 7; 

(xia — 1) pL ^- I.C; 
ii (4Jju — 2) p2 -p- 1.0; 
LI C*Jjn 5) p3 1- 1.0; 
LI (Aim — «) o4 *- 1.0; 
LI (aJjn — £1 p5 1.0; 
ii (aJjn — 6) DO 4— 1.0; 
LI (4JLm — 7) p7 'p- 1.0; 
totalm 1; 

1 

J 

?: - p2/t=til=; 
pi - p3/tcczi--n; 
=4 - p4/tst^IJa; 
pi - p£/totaim; 
CO - pD/tstil.-r; 
p7 • p7/t3Ciin; 

irz:..-.ci{i*iar:r,, -\n Total nurr^er ci dliqr.cs^ics rur. : , tccalr.l ; 
=p=:.acf (JEilarni, "\n P(Alirr. 1 souneecl - ^l'",i:l}; 
rprinci (falArm, "Xn P(.MAr= : souxiiftcll - ^ii",p2); 
tpri.irf Cialaxr:, "Xn P( Alarm 2 sounctdj - M*",i53); 
;==Ln^i(iaiar=i, -\n ?{Alarn 4 sountadl - \li",c*); 
i-sriri-iiUalarr.. -Xn P(Alar=; £ scuncsc) - \W /pi) : 
rpri.-icf (ralATz:, -Xn ?{Alim 6 scur.d«d) - ^iir-, p6); 
rprintf (falarai. -Xn P{Alam 7 sour.cedl - %li".?7); 

;=loac (iila— ) ; 



I.n running t.Ms cod« zzz the nuclear piinc cica, C'jo rhincs neec cs be 
' ciianged when c^.anqin^? cays: tne iilaname ana the tide. The iila.iane 

* The filenaAie to be c.^*anced is at the t=p oi the isllowinc csde cn t.*:s 
iirsc line cl code (DO NOT c:-l.\NGr Z2Z DniTCTOR?) . The title to be 
changed Ls on the 6th line cc code. To use the mean for the current 

* day, leave all procsdures in as they art. To use the mean of t.he 
day ran previously, comment cue the 7-9th lines or code. This will 
cause the means o£ the data to be read from a file created at the 

* last run - this way ycu car. compare the whole month by using the mean 
of the first day. Output is directed to the file ' sprzip .1st ' . I.-. 

* this file, the results ot the sort run including longest' sequence of 
failures and total number of decisions tec each of the slg.-ial ca:.rs 
is outpuc. Tne signal pairs are cl-c2, c2-c4, c£*c6, c7-c3, c9-cll, 
and cl0-ci2. In addition to the cumulative results of the run, the 

" S?RT1 and SPRT2 values at each data point are also given (to rsoove 
' this feature, ccmment out the 'proc print' procedure on the last line 

* of the mAcroi • 

* Written by Kristin K. Hoyer 



filename sprtfil ' -hoyer/data/fp/sprtvals . 1st' ; 
lihname datlib ' -hoyer/data/£p' ; 
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sc m«Lxs m«*n noprinc;_ ' ^j^, ^5^3 ^14 i do cl" 

v6= cl c2 c3 c4 -- 

^" «*n-«l r-2 «3 m4 0= a5 n." « »2 «1Q =11 ^2 

*-'^:i3*:i: «i« ^iV-SrSae 019 r^o «2i .22: 

ei.l22 - c2-(n2- (c j-rru) ; 

ciiiS - c4-^ft^- (c5-»=» ; 

« c=-»i- (cS-mfi) ; 

c^2l5 - c7-flv"- (c9-mB) ; 

S^'dlMii^ <^-'' 

* • d'^-zlZ diiill ci;i2.2; 

^rV^r^nriLif: ^ii'^'llii^ di^r? ci:rf- ci-e c-f:o 
^iiti cli2:2; ^3 ^, ^. ,5 va v9 Vic vi: 

caca s-cptai; act siqr.ai; 

sixl - 4 . 5 'v L'*0 . 5 : 

srzu - 2;£-v2-'Q.S; 
3is*i - 2 .5*v*t"0 -5; 
sliai - 2.5-v£"0.5; 
srtao - 2.£-v6"0.i; 
5fn7 • 2.i*v7— 0.5; 
ai^ifl - 2.;*v9»'0 .5; 
sia9 - 2.5'v9''Q.5; 
sirraO - 2 . £ 'vlO- '0 . ! ; 

1 ' 2,5'vll»"*0 
$iril2 - 2.£"'1.2'''0 



'r^iis is Che uadatsd. workinq S?KT nvac==. 
T- ortie- to c« this niacro. severs- 
chJ^r-n.«d to b. up in f 
Cill a <Uti and eacrieve the data, cne 

!tn«r Siiure ^gi-.'^de, and tr.« veriance oi 
the siona"! TUB variable icuax b. renamed 
1^ fol^cwl y - data. «to-«enaor failure t«<rn. 
"virhn«: 'to chanqe the th=eshhold l^.t 



lon^ni^-:. chir-c. the value cf the mac, 
;^tlhle thresh (in the S7RT Mcrcl t. tn 



3 

e 



desired valu« . 



macro do2aprr 

g-sin/v: 

thrsh - 

wndv «- SOOOO; 

<r ( K - 11 then do; 

retain faill 0; retain taii2 0. 
cecain iaiilpt 0; 
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rec&ln ri#<n3c 0: 
racaiii failsac 0; 
ret»in fl 0; * 
rscain i2 0; 
r«tain £lpt 0; 
r«£iln £2pt 0; 

r«T:iin yt5l;r«cain yp2; 

XNCi- -<;-((sr:-/2j-Y) ; ::;c2 - -c»( (stm/2i-v, , 

(ypl>- tArsh c= ypK- -thrah) then srrt-'- Inc^ • 
ciae sprtl - ypl ^ iAci; ' 
{irp2>- tixrsh or yp2<- -thrih) chin s=r-2 - inc2 * 
eiae «prz2 - yp2 * tzcZ: 
ypl - apcT:i;yp2 -*sprT:2; 

S?RT1>- zhzzh THEN S9RTl-thrsh; — "'-"^*2— chrsn; 

rr £?RT2>- tnrsJl THZX S2RT2-chrsh' 
17 (SPRT:. >- thrsh) THIN TRI?H1 - L- 
IT (£?RT2 >- thrsh) THTN TRI?iiI - 1; 
rr (S5RT1 <- -c^rsftj THZ:i ZTiZff^l - i- 
ir (S?RT2 <- -thrsh) TXrN TRI2K2 r l' 
:r (S7RT1 <• -t>^sh) TliZN fl - 0; 
r::^! (SrRTl >- zhrrhl THIM 00: 

IT in - 1) THz:i - ^f 

END ; 

ZISZ 00; 

ri - fiiii; 

ri?T - :i:.i:rc; 

END ; 

ir (SrRr2 <• -chrs»^j THEN ^2 - 0; 
ZlSt IT fS?Rr2 >- thrsh) THIN DC; 

xr (-2-1) T.xrN r25T - m ; 

END; 

DO; 
r2 - rail2; 

END; 

I- (?i >- TMLSZQ) OR (r2 >- rxiiszc) THZ:i cc- 

{Tl >- r2) TH2:n DO; 

^ C0;rAIl£3:c - r2;r£ZQPT - -2PT;rjD; 

Zrsr DO;rAIl£ZQ * 0;rSZQPT - O/E^ro- 
ialil - il;faii2 - £2; 

" il?c;tail2pt - :2ct; 

CNT I; 

VAX - KOD(_N ,wndw) ; 
IT VXL - 0 OR lOr THIN 00; 
riLE PRINT; 
t" (CNT > 0) TEEN DO; 

FRZQEl - TRIPHI /'cNT; 
rREQH2 • TRI?H2 / CNT; 

TOTHl ^ rR£QHl;T0TK2 -p rRZQH2;T0TC:rr - 1; 
THl - TOTHl / TOTCNT; TH2 - TaTH2 / TOTCIM; 
ADDTRI? - ^•3l£QKl■^^REQH2;ADOT-THl♦Ta2; 

JLPHI-TOTH1/(TOTH1-*'TOTH2)» 100.0; BETl - -CTH2 / (TO^i:i *tctoii . 
' TRIPPING FREQDENCT- WINDOW SIZE: ' CNT/ 

HI TRIPPING niEQDENCr / OBSERVATION (->rXIlDRZ) ■ ' rt»-nHi/ 
H2 TRIPPING FREQUENCY / OBSERVATION {->KQR«XL) ' r^-r / 
CCMSINEO TRIPPING rREQUZ.MCf PER OBSERVATION: " * IS^SSt^ . 
LONGEST SEQUENCE QT FMLURE DZCISIONS: , * FAITc-;. 

•DATA POINT AT WHICH SEQUENCE FIP.ST OCCURRR£D ; ' F^nP^T 
PERCENT TIME A FAILURE hODE SELECTED: . a£?hi// 
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-NO; trich2 iailscc f3««c; 

:rcp iail- faill?* i2i.i2 

:rcc r.fttns metr. nocrir.t; 
Viz tpr^l; 

^ 

sec end-Slor; 




-/ 

/- r.*>,*- KAoca Whil2tt5-- or. c.e pe ^— 



/- Fisher Kapca Whiiatts-- or. c'-j 
• and resicual cAti. 



/* and residual cAti. -....r— =ovcr 

Wr-C-sr. by r-.sc... -ay*- 



/• Osi-::? a number ot ^'^^^^ 

spec—i procedure — *.-U.8*» 

rroc 5pec-.=^ daca.d^-.lli>.lcr^^ ouc-c.^ec c-c. p 

' var trawdat; ^. eor^ tv descer.dir.q psd cs cet / 

cz=c sor-, daza-cspec out-tcr-.s?ec. crcr^nar.-. pericclics •/ 

by cescsnding p_Ql s_0-.* 
cica* datlib . fiiset : 
set d-atlib .itris ; 

xln - - 1; /• u-e 5 hichcsc psc vaia • 

CO i-1 4Mt1; Across --^» "ocrier ccei'/ 

sc^ scrcspec poinc-i; . m/-? n. /• and C==c and recsnszr. '/ 

li( i - 1) t-Jien power-c-s^oi/^.u. curve. 

. - 0— s(rrec- ain)-sin.01-sin(frec-T:vin); 

power^cower c3S_o- 
and; /• fourier curve - pow<r •/ 

end; /- residual - nois* •/ 

min - fflin'l. 0/120.0; 
noise - trawcat - power; 
)ceep min power trawdat rxisc; 
oucpuc; 

var noLse; 
daca newpsd; 
act newpsd; 
p res - p_Ql- 
Jteep p.res ireq; 
data datlib.tspccset; 
Bierg« newpad tspec; 
by freq; 

keep £r«c p_OI p^ces; 
toend liourrec; 
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/• This KAcra »dcs G^uisitn r&ndoc noi^e to the Foari-cr curv* •/ 

/» 'pcw«r' tz crtACt ihe recsr.scr-iczed curve ' recop.s' wtch the •/ 

/• air-a Hiean ar.d vtriir.cs 12 tr.e otiqir.tl curve 'r»wcit'. •/ 

/• T^e ir.cut dizisec sh.suic csae ircr* tr.e llbrxry with •/ 

/• il^rai' - 'iaziib', tnc the d£t&£et p.*-'=e sr.cuid be aaa^er.ed •/ 

/• lw-,th £ omcrc) the the reiarsnca nwc 'daet' •/ 

crcc means datx-ditlib . fidsat var nocrir.t; /• Get the varixnct cf the • 
vaz noise; /' res-cuai i-iactian -/ 

oucpuz out^tvorJc v&r«si.qma5q; 

data datli^.&dset; 
i-l; 

sec datllb.fdset; 

aet tucrx point-i; /•Generate the random ci^-x »/ 

recsns - siqnii3e--0 . 5 •rar^.crC) pcwer; /•xr.d ids t= 'ccwer '/ 
keep sir. trawdat pc-zer arise rscrr.s; 

crac means data-catiii . icaet aexn var skawness 'jcurtsiis riir. fr^:c; 

^»nd a ddr an; 

/ / 

\ffj.cro ncr=;C5t (n-xl ; 

This frj.cr= testa the r.amalicy oi the cAti •/ 

/• passed as a e^rir.eter . The tnethcds usee are •/ 

/- the D'A^sstika Pearscn K*2 test -cr the 2rd ar.c 4th •/ 

/• mcrsents and the Kc2jrjoqctav-£mi.rr.ov tsst. •/ 

/• The inout dataset should cc=:e Crrr: the iibrirv with '/ 

/• iibrei - 'datiii', and the dstasat name shculc be assigned •/ 

/• (with a macro) the the reference nane 'dset' •/ 

/» Written cy Kristin Hover 

data tvork; 

set datlib. £dsat; 
crcc means data-tvcrx n nnias sicewnesr kurtaiis str p.crrint; 

var tx; 

output out-ttats n-n skewnesi-sl: Iturttsii-l-^ rtt-si-rria: 
/• Compute the skaw crntribution t= tne tast stitistir •/ 
/• according zz the Johnson Su acprtxi::iiticn '/ 
data skew; 
set scats: 

y - sJfCCn<rlj'(nT3l/(6.0*(n-2l)l»'0.5; 

beca2 - 2» (a-n-»-27'n-70) • (n+lJ • {n-r3 J / { (n-2^ • (nT5l Mn-7) » tn-rS) ) ; 
wscr - -1.0 (2.0'(beca2 - l.0)J'*0.5; 
delta - 1.0/ (0.5-lcg(usc=) ) ••0.£; 
alpha - (2.0/twscr - 1.0))"0.5; 

X - delti*loc(y/aipha ^ (yy/ (alpha^alcha ) * 1.0)»-0.iJ; 
Ltsqrbl - ft; 
keep ^scrbl sk; 
ourout ; 

/• Compute the kurtosis contribution ta the test statistic •/ 
/» according to the .Knscombe and Glynnc Approximation •/ 
data kurt; 
set stats; 

k - (Jt-r3.0*(n-l)**2/((n-2)»(n-3))); 
b2bar - 3 . 0- (n-l) / tn^l) ; 

varb2 - 24 .0-n» (n-2) » (n-3W ( tn*l) • {n^3) • (n-^i) ) ; 
X - (k - b2bar)/varb2**0.5; 

beta • €.0Mn*n-5'n-2)/((n*7)Mn+9))M6.0-(n-r2)Mnr51 

7(nMn-2)»(n-3l))»'0,S; 
a - 6.0i'e.Q/bcta»l2.0/beca (1.0+4.0/ beta*-2 J»»0.;i; 
dum - ll.0-2.0/al/(1.0*x-(2.0/(a-4.0)J»-O.5); 
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1-^,0 - 2.0/(9.0-*) - <iu«3; 
. - s /(2.0/(9.0'»»l"0.3; 
xssrW - 1"2- 
Stse's xsrris2 !c: 

/• S«l -- 

ciit r.uli_; 

file F=i--«J _ 

iMsge skew leurc; 

Jcsor - xjcrijl - xs«jr=2, 

cut '0 Xqoacino Pearssr. cssuits -or 

'Test vaJ-UQ ' Stscr// 
pcoc univariate <Liti-cail^i - t-«c -or=a 



t" .<ArLor. i..-. 3le?ress-=- ?.es— u._5 ^.-^ •/ 



da.za ^null; 
file print; 

sec cnd-eof; /•Gee ne^acive and positive rur.s 

if tr*. then 9=^= ^r.c rn:-5sinq values. 

pr*4t>-0; 
nc-^pr; 

nnV(l-?r) ; ..... n- 
• ' pr ne LagCpn tr.er. 5 

=^s: ii .ci .hen // 
pur ^ runs// 

'Huabcr Runs ' nr.// 

'-Suinfaer o£ Neqacive , np; 

'number oil Positive Residuals 
calculate the Z Statistic 

a-2*nn'np/ (nn-rnpl /nnvp~l) • inn^rno) ''l) ) ; 

s-5qrt(2-nn-np'(2'nn'np-ftn-op)/ nn-r.^ l) 

xp. ( runs-u* . 5 ) / s ; pp-orobaor= C=? U 

'I- ' tn 'prcb > Z- 
ead; 
%ffiend roAs; 



%inciude Mcros; 
%let d3et-reconsl4; 
%lct rawdat»cli; 
llet specs«c-psdl4; 

%lct "1 - 3-0' 
%iourrec 
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%adcirtn 

proc MAns dACA*d&ca . (d5ec m«&n noprinc; 
v&£ £r&wda.c; 

ou^pu-i cuz-twork m«»r.«rau; /* C«t the rtslduils needed •/ 

ditk; /• isr the ' si^n' Mcrc •/ 

sec dac2.,£d2ec; 

t-L; 

sec twosx poinc*!; 
r* <rawdAC - nu; 
res-noiae; 
)ceep r rss; 

%run3 (r-r) 
*runa (r*cca) 
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APPENDIX B 

Listing of the SPRTEXPT^ FUe 



SPRT.Experc Procedure 



, , : SPRT Expcrc Procedxirc 
(define (SPRT_E:cperc) 

• ' Rec-ieveDAtA Procedure - Thi« incemel procedure retrieves che SPRT dAC* 
from Che specified DacaFil*. The procedure reads che ntxz NLines lines 

'. ' from Che file. The procedure is recursive, it decremeacs NLines uncil 
NLines reaches 1. If the end-of-file is reached during che daca re- 

' ' trie*/al the eof character is added co che end of the list recumed by 

1; the procedure. The procedure returns the NLoncs read as a list. 

(define RetrieveData 

^'(Sf ((?S"t?"t^^eld.li^^ DacaFile))) ; Read next line in OacaFile 
(if (eof-objecc? CorrencLine) ; If «of reached, return ecf 

CurrentLine '* character. 

(if (eq? 1 KLines) ^ If Nlines read, return null, 

(list (Chars-co-Lisc (string- list CurrentLine))) 
(cons (Chars -co- List (scring- list CurrentLine)) 

(RetrieveData (• Nlines 11 Datafile) )))))) 

Ciars-co-List Procedure - This internal procedure recursively converts a 
list of characters that contain embedded 0 and 1 characters into a list 
of 0 s and 1 1. Any other character than a 0 or I is ignorea. 
(define ChJurs-to-List 

^'^foS Chars) ()) '•iL^^.S^iJf 

((char-? (car Chars) SO) , ' ^ ° " 

(cons 0 (Chars-co-List (cdr Chars) ) ) ) 
((char-? (car Chars) # 1) ; Add l to list. 

(cons 1 ( Chars -to-XJLst (cdr Chars))) ) 
(else (Chars-to-List (cdr Chars))) ) ) ) 



;; Eof -List? Procedure - This intenial procedure searches a list ^^^^^y 
element for the eof character. It returns true if the cnd-cf-file char- 
i) acter is found, or false if the list does not contain the eof character, 
(define Eof -List? 
(lambda (Lac) 

(if (eof-object? Lst) 
dt 

(if (null? LJt) 



0 



If the current object is the eof 
character* then recum true. 
If the list is null, 
return false. 



(Eof -List? (cdr Lst)) ) ) ) ) 



ListTrippedSPRTs Procedure - This internal procedure processes the list 
of SPRT data for a pass through che main do loop. Each element of the 
Use contains the SPRT data for an independent group of SPRTs. Each 
element of the lisc ts processed by che internal FindSPRTs procedure 
which returns a list of numbers where each number reprsents the SPRTs 
thAt have tripped (i.e.. equal to ll . Thus if the following list of 
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;; SPRTa ia paaaed co FindSPRTa- fo i n n n i n it i 

following li.c: (2 €t] 10 1 0 0 0 1 0 H , it would return the 

(define LiatTrippodSPRTa • 

Main body of LiatTrippedSPRTa 



) ) ) ) 



t f 

(lambda , 

(if (null? SPRT'Liat) 
0 

(cona (FindSPRTa (car SPRT Liat) l) 

(LiatTrippedSPRTa (cdr SPRT^Liat) ) 

;; FindSPRTs internal procedure: 
(define FindSPRTa 
(lambda (Lac I) 

/T»^ , ^ ' *^ num ber to output l-tat 

(elae ^at) (-r I i)) ) ) . 

''(FLdSPRTs (cdr Lac) f T) ^^^PP^^, ionore . 

; ; DisplayGroup internal procedure • 

'iiefSt' D?."!:S^L?'P'*^« ^« "Ch SPRT croup, 

(lambda (GroupData Count) 
(if (null? (car GroupData) ) 

(begin »c end of GroupData liat. 



(newline) (display SPRT Grouo # ) (diaolav Counci • * 

(if (eq? (caar GroupData) l) 

(display industrial device ) 
(diaplAy industrial dcvicea ) ) 

di^i^Sv' ''^'^ ^ (di«lay (cadar GrouoDaca)) 

/ i *^i^P^*y (cdddar GroupData))) ' ' 

(If (eq? (cadar GrouDData) l) *- / / / 

(display redundant aenaor. ) 

(display redundant aensora ) ) 
(newline) 

(DisplayGrcup (cdr GroupData) (* 1 Count)) ) ) ) ) 

Main body of the SPRT Expert Procedure. 
First, mtxalire local variables. 

{NSPRT.Groups 0) (NDcviceGroups 0) (NVariables 0) 
NDevicea 0) (NSenaors 0) (Count 0) ^"^"^s 
(DHame ) (VName ) 
(InputFile ) (inputPort ) 
(GroupData {) ) (SPRT^Data ()) ) 

;; Print program title, 

(newline) (newline) 

l^Cffir, („.wllae, 1ne3lSr '^""^ Si"-l«io„ Pro-am , 
'iil.B^'!^ number of device groups co be .luilysed 

5X device groups - j"^-^^***- 

{«ec! MDeviceGroups (scring- number (readlline) e d) ) 

;; Start do loop to input data for each device group. 



(let ( 
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(do < (I 1 I 1>) ) ^ , 

( ( KDevicsGroupa Z) } 
;; Body oC do loop, 
(newline) (newline) 

(display 

(newline) 

Query user for device group names . 
(display DEVICS MAME: ) (newline) . , 

(display Encer che name of device group number ) (display I) 

(display - ) 
(sec! DName (read-line)) 

^^^^oi^-/ user for the number of independent devices in che group, 
(displav DEVICE NUMBER: ) (newline) . , , 

(display Enter che number of devices in the ) (display DName) 

(newline) (display device group - ) • 

(set: NDevices (string- number (reaa-line) e a}) 

J^^'^oi^rv user for number of physical variables in device group, 
'tdisnlav PKYSICXL VJ^IABLE NUMBER; ) (newline) 

display Enter the number of physical variables in the ) 

(display DName) (newline) (display device group - ) 

(set! NVariables (string- number (read-line) e d) ) 

;; Start do loop to input data for each device/physical variable 

grouD . 
(do ( (J 1 (t- J 1) ) ) 
( ( NVariables J) ftc ) 

;; Body of do loop. 

(newline) ^ . ^, 

Query user for physical variable names. 

(display PHYSICAL VARIABLE NAME: ) (newline) 

(display Encer the name of physical variable number ) 

(display J) (newline) 

(display of the ) (display DName) 

(display device group - ) 
(sccl VName (read-line)) 

•"^Que^ user for the number of redundant sensors in the group, 
(display SENSOR NUMBER: ) (newline) 

(display Enter the number of redundanc sensors for the ) 

(display VName) (newline) . . i 

(display physical variable in the ) (cisplay DName) 

(display device group - ) 

(set! NSensors (string- nximber (read-line) e dj ) 

Increment the number of SPRT groups, 
(set! NSPRT^Groups (♦ NSPRT^Groups 1) ) 

;; Add SPRT group input data to the GroupData list, 
(set I GroupData (cons 

(list NDevices NSensors DName VNaroe) 

GroupData) ) ) ) 

Reverse the order of the GroupData list so that it will be consistent 
, , with the SPRT data, 
(set! GroupData (reverse GroupData) ) 

; ; . Display SPRT necwor)c data. 

(newline) (newline) ^^^^ 
( display .♦.♦♦.^♦^-♦♦♦^.-.--•-♦♦-•'•►♦■»-*-»-**++*'^*-»-**'*'*****'^****'^+-^'^ 
( newline ) (newline ) 



# t 

I » 
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(display The number of SPRT Croups in che sim,.i.^- 
(display NSPRT Groups) (display !^ ) "newti^T " 



;; . Call DisplIyCrouo co diSpliv che inpuc variable. f« 

(DisplayGroup CrouoOaca i) ^ variables for each sPRT greuo 
(newlinel (newline) 
(displav ^ 

(newlini) (newline) — — , 

»»ser for che name of che data £il* th-r 
display Eacer filename for SPRT d«a - l ^ ^acaias che SPRT daca. 
(see InpucFile ( read- line » » 
; ; Open SPRT daca file . 

(sec! lapucPorc (opea-inpuc-f ile lapucFile) ) 

Eacer maia do loop, which recrieves all of the SPiiT H.r. ^- 
a camescep. For each cimesceo of che SP^t oroJ,^ " «J-CCea ac 
; of daca are wrictea co che data file EaL^i?!!^' * 
; daca (0 . and 1 .) for an i^deje^dwt gro^ iJ^«^?s"^h 

(do ( (lapucDaca (RecrieveDaca NSPRT Grouos Iw^Sortf - 
/ tf^* r- , iJ^ec^eveOaca NSPRT^GrouDS InpucPor-)) 1 
( Eof-Lisc? InpucDaca) (newliaeT (newline) 
display Ead of ) (display InoucFile) 

(display reached - S?RT_Experc cenninaces . ) (aewline, , 
; ; Maia body of che do loop . 

Opdace couac. which couacs che sees of S?RT daca wriccea co che 
(sec! counc coimc 1)) 

; ; Convert the SPRT daca for this oass chrnM^K ru* i 

tripped SPRTa [i.e,, SPRT rl] ^ ^^^o^?^ the loop to a list of 

Inewli^ef^-^*" (ListTrippedSPRTs InputData) ) 
(display . 

(newiine) {newline) ) 
(a^li^r ' 

. ;; lisc of CriDoed SPRTs There r coasisca of a 

;; Pause the screen so thac the user can read the result.* 
;; current block of data. results for the 

(display Hit the enter key to analyze the next ) 

(d-play block Of data ) Tnewlinel ^rea5!l?:^? (LwUne) ) ) , 
Ead Of SPRT^Expert Procedure 
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AMlyxe Procedure 



Analyze Procedure - This procedure csncains the logic rules for the 
SPRT Expert System Simulatioa program. 

(define (Analyze GroupList SPRT^List GroupCounc) 

AnalvxeGroup procedure - This internal procedure controls the flow of 
«Ri^?r^lyat5. It is passed Che input data,and the list or trippea 
Iprts for a griup of independent SPRTs . Depending upon the numner of 
devices in the group, AnaiyzeGroup calls a procedure wnich pertorms the 

;i actual aivalysis of the data. 

{define AnaiyzeGroup 

«nd (Teo^ (car Incuts 1) ' ; The nunu^er of devices is 1. 

ilRTii ; " rxo SPRTS have tripped. 

^^tdisolay No SPRTs have Gripped. ) (newline) (newline) 

(J ) ; return aull . 

(SingleDevice (cdr Inputs) SPRTs) ) ) ^ . . . ^ 
((eq? (car Inouts) 21 ; The numoer of cevices is 2. 

(if (null? SPRTS) ; 12 no SPRTs have trippea. 

^^Idi^olay No SPRTs have tripped. J [newline) (newline) 
( J J ; ret\im null . 

(DualDevice (cdr Inputs) SPRTs) I ) . , . 

, , ' ; The number or devices - 3. 

lif (null? SPRTs) ; no SPRTs have tripped. 

^^tdisplav No SPRTS have tripped. ) (newline) (newline) 
. ^) ) • ; retxim null. 

(MultioleDevice Inputs SPRTs) ) ) ) ) ) 



. . SingleDevice procedure - This procedure contains the logic for the 
;; analysis of a SPRT group which has 1 device, 
(define SingleDevice 

'^*»^*^Pi!rc"SS"c:4-l5y'"riahle» to excra« the daca iro. che InpucDaca 
'•; list aad the auaber ot tripped S?RTs. 
Uet ( (HSenaors (car laputData) ) 
(DHame (cadr XnputDaca) ) 
(VMaroe (caddr InputOata) ) 
(KSPRTa (length SPRT_Oata) ) ) , 
;; The logic depends upon the nuraber at tripped sprts. 

•(iond (( - ;f J2a'ca»e. 3 or more SPRTs have tripped First write 
■'. oessage showing current device and physical variable. 

iiiSiS %S'cal'viS2irortS^' ) (display OHa»e, 

It^^'jiST HsSlS^^eLirSr'""*; the sensors failed, 

beein •• message, 

(display All ) (display KSPRTsj 
(display SPRTs have tripped ) ) 
(begin : ""^^ message. 
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(display These ) (disolav nsprt^i 

jdi.pj., „,„o„, ,,„;,,y ifi?j;r^.5._th.^ , 

((cq? NSPRTs 2) 

/; In this case, 2 SPRTs have tripped First . 
;; message showing current device knd «h5:^ , 
(display For the ) (diSLrSame"'' P^VS^cal variable, 
display physical variable of the i f^^^i 
(display device: ) (newli^e) ' -t^i^Play DName) 

List the tripped SPRTs 

{^fS^-*^ ^w^' » (disDlay NSensors) 

display SPRTs have tripped - ") (n«wli«*f 
(DisplaySPRTs 1 NSensors IfRT.Dati) * "Sl^ij 
'/' 1. 7^ determine if a sensor or the device f.^i ^ 
(cond ((eq? (car SPRT.Data) (. (cadr SPRrlHa^f n^-^'^* 
;; We can conclude that a sensor Eas fiilii w 
;; Che tripped SPRTs are ne.^" ^h oJJ"' 
(display SENSOR NUMBER A ) ocne. . 

(display (cadr SPRT Data)) (display utic -m-rr^ 
(newline) (newline)r i^ispxay HAS rAxLED ) 

((and (eq? (car SPRT Data) l) 

(eq? (cadr SPRT^Data) NSensors)) 
;; We can conclude thac the first sensor has faii.H 
; ; because the first and last SPRTs havl t-^oJed ' 
NUMBHR Al HAS PAXLED llZ^^' 



(else 



We can conclude that the device has 
. the cripped SPRT, are not !5*ceSt 
display ...THE ) (display DNLne) 
Gisplay DEVICE HAS FAILED ) (newlinel 

( (eq? NSPRTs 1) 

Qisplay physical variable of the ) (display DNam^l 
(display device: ) (newline) ^^spxay DNarae) 

(display One SPRT has tripped - ) 
DisplaySPRTs 1 NSensors SPRT Data) (newline) 
display -.THE ) (dispUy-DName) (dismay DEVICE ) 
(If (eq? (car SPRT^Data) NSensors) "?-^*y DEVICE, ) 

(begin " 

(display SENSOR NUMBER Al, ) (newline) 
(display OR SENSOR NUMBER A ) 

(begin 

fT^LSSe'?*' ''^"^^'^ (carSPRT.Oaca), 
(display OR SENSOR NUMBER A ) 

(display (♦ (car SPRT Data) 1)) 
(display MAY HE FAILING ) 
(newline) (newline) 1 ) ) ) ) ) ) 
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; ; DualDevice procedure - This procedure concaina the logic for the 
;; anAlyaia of a SPRT group which has 2 devices, 
(define DualDevice 

(lamhda (InpucDaca SPaT_Daca) 

Pirac use cemporary variables co excracc Che data from the InpucDaca 
;; lisc and the number of tripped SPRTa. 
(let { (NSenaors (car InputDataJ ) 
(DName (cadr InpucDaca) ) 
(VName (caddr InpucDaca] } 
(NSPRTa (lengcb SPRT^Daca) ) ) 
; ; The logic depends upon Che number of cripped SPRTs . 
(coad ( ( m MSPRTs 3) 

In chia case, 3 or aiore SPRTa have cripped. First write 
; message showing current device and phyaical variable, 
(displ&v For the ) (display VKame) 

(display physical variable of the ) (display DName) 
(displav devices: ) (newlinel 

(if (ec? NSPRTs (• NSenaors 2)) ; If all of the sensors failed, 
(begin ; vrice this message, 

(disolav All ) (display NSPRTal 

(disolay SPRTs have tripped ) ) 
(begin ; or. write this message. 

(display These ) (display NSPRTs) (display of the ) 

(displav (• NSensors 2)") 

(disoiay SPRTs have tripped - ) (newiine) 
(DisplaySPRTs 2 KSensors SPRT^Data) ) ) 
;; We conclude that the device has failed. 

(newiine) (disDlay ONI OR BOTH OF THZ ) (display DName) 

(display DEVIC^IS HAVE FAILED ) (newliael 

(newiine) ) 

((ea? NSPRTs 2) ... 
;;' In this case, 2 SPRTs have tripped. First write 
;; message showing current device and physical variable, 
(display For Che ) (display VName) 

(display phyaical variable of the ) (display DName) 
(display devices: ) (newiine) 
;; List the trinoed SPRTs. 

(disolav These 2' of the ) (display (• NSensors 2)) 
(diaolay SPRTs have cripped - ) (newiine) 
(DistslaySPRTs 2 NSensors SPRT Data) (newiine) 

Next, determine if a sensor or the device has failed, 
(cond ((eq? (car SPRT Data) (- (cadr SPRT_Daca) 1)) 

;; We can conclude that a sensor has failed, because 
]] the tripped SPRTs are next co each other, 
(display SENSOR NUMBER * ) 

(if (even? (car SPRT^Daca) ) 
(begin " 
(disolay B } 

(disislay (-^ (/ (car SPRT^Data) 2) 1) ) ) 
(begin 

(disolay A ) 

(display (+ (quotient (car SPRT^Data) 2) 1)) ) ) 
(display HAS FAILED ) 
(newiine) (newiine) ) 
((and (eq? (car SPRT Data) 1) 

(eq? (cadr SPRT^Data) (• NSensors 2))) 
We can conclude chat the first sensor of Che second 
; ; device has failed, because the first and last SPRTa 
; ; have tripped. 

(display SENSOR NUMBER Bl KAS FAILED ) 
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(newline) (newlinci ) 
(else 

;; W« can conclude thac the device k.- « 

Che tripped SPRTs .re not l^fceSt '^^^ 
dispUy — ONE OR BOTH OF TSE ) 
display OName) (display DEVICES HAVE WTrr^ 

(newliae) (newline) ) ) ) ^ FWLZD *— ) 

((eq? NSPRTs 1) 

;; la this case, i SPRT has tripoed. Tti» i- ^, 

* early indication of a senslr or dISce Ja!?u.'^''^*' " 
a spurious SPRT trip. We conclude . if tj?'^'*'^. or to 
||i«Pl-y For the ) (dLplaJ WaS"**' ' 

P»»y»i<»l variaile of the 1 (di.m.,. n« . 
display devices: ) (newline) <«.«pl«y DMame) 

display One SPRT has tripoed • ) 
DisplaySPRTs 2 NSensors SPRT Data) (aewl-ne) 
display ONE OR BOTH OF THE display DMa«*» 

display DEVICES, ) (newline) *"-»P-L*y DName) 

(If (eq? (car SPRT_Data) (- NSensors 2)) 
(becm 

(display SENSOR NDMBER A ) (disalav we— 

(begin 

(display SENSOR NUMBER A ) 

(if (even? (car SPRT Data')) 
(begin " 

(display (/ (car SPRT Daca) 2)1 
display OR SENSOR FfUMBER B ) 
display U (/ (car SPRT^Daca} 2) i)) 
(display MAY BE FAILING ) 
/ (begin ' 

(display (^ (quocieac (car SPRT Daca) 2) 1)) 
(display- OR SENSOR Nt3MBER B )" ' i 
display (* (cuccienc (car SPRT Daca) 2) m 
(display MAY EE FAILING )~) ) ' 

(newline) (newline) ))))))) 

(lambda (InpucData SPRT_Data) 

; ; first use temporary variables to e^c-aec th» « 
;; list, the number of tripoed SPWs th- n.™.! «iaca^«=-om the InputData 
and the list of tripoid SPRTs for' t^^ l«r" ^ tripped SPRTs, 

•iietr'f tSi"-''^ nlfS'dfSp'L' t^: J"ceS^^"' "^^ ""^--"^ 

(iec» ( (NDevices (car InputDaca)) 

(NSensors (cadr InputDaca)) 

(DName (caddr InputDaca)) 

(VName (cadddr InputDaca)) 

(KSPRTs (length SPRT Data)) 

(DeviceLisc (KameTrippedSPRTs NDevices SPRT Data) ) 
PreviousDevice (car (reverse DeviceLisc) ) )" 
(CurrcncOevice () ) -^^^i n 

(NextDevice ()) ) 

'tLJ^^^f depends upon the number of tripped SPRTs 

("nd ((eq? NSPRTs (♦ NSensors NDevices)) 

;; In this case, all of the SPRTs have criDoed F^-st w^sr. 
; a message showing current the device and"phvsicll^i^f^^f 

(display For the ) (display VName) Pn/sical variable. 
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(display physical variable of the ) (display DHame) 

(display devices: ) (newline) 

(display All > (display KSPRTs) 

(disDiav sPRTs have tripped ). (newline) ^ , 

(disolav ALL ) (display NDevxces) (dxsplay OF THE ) 

(dis?la^ DName) (display DEVIC2S HAVE FAILED ) 
(newline) (newline) ) 

f ( lYSPRTs 0 ) 

" In this case, 1 or more of the SPRTs h^ve tripped. So we 
' ' determine if any device or sensors have failed. First 
* write a message showing the c%arrent device and physical 
;V variable. Then the names of the tripped SPRTs are displayed, 
(diaclav For the ) (display VMamc) 

(display physical variable of the ) (display DKame) 
(display devices: ) (newline) , ,.. , , ^. , 

(displav These ) (display NSPRTs) (cisplay of the ) 
(display (• NSenaors NDevices) ) 
(display SPRTs have tripped - ) (newline) 
(DisnlavSPRTs NDevices NSensors SPRT^Data) (newline) 

A do loop is used to step through the list of names of 
t-ipped SPRTs. For each device, we can determine i^ the 
device has failed, may be failing, or if one of its sensors 
has or may be failing. The do list steps from device 1 to 

; ; KDevices . w • ^ \ \ 

(do ( (SubList DcviceList (cdr SubList) ) ) 
( (null? SubList) (newline) ) 
* • Body of do loop . 

' • Fi-st I reset the temporary variables whica contain 
;i the list or tripped SPRTs for the current and next 
]; devices. ^ 

(set! (MrrentDevice (car SubList) ) ^ ^ . , ^. 
If this is the last pass through the go loop, then 
current device -is number NDevices and the ne:<t aevice 
]] is the first dc^n.ce li.t:, device number A], 
(if (null? (cdr SubList)) 

(aetl NextDevice (car DeviceList) ) 

(set! KextDevice (cadr SubList)) > . . , . ^ 

;; The logic depends upon che numner or tripped SPRTs tor 
' ' the current and next devices . 
(ccnd ( (and (not (null? CurrencDevice) ) 
(not (ntill? NextDevice) ) ) 
;; m this case, the current de'^ce and the next 
' • device contain tripped SPRTs. 

Next we check to see if the tripped SPRTs 
imply a sensor has failed. 
(if (and (ea? (length CorrencDe'/ice) 1) 
(eo? (length NextDevice) 1) 
(eq? (cadar CurrcntDevice) 
(cadar NextDevice) ) ) 
In this case, the current and next devices 
contain 1 tripped SPRT and the sensor num- 
bers of the SPRTs are the same, 
(if (eo? MSeasors X) 

;;' If the devices contain only 1 sensor, 
; ; then either the device or sensor has 
;; failed, 
(begin 

(display DEVICE NUMBER ) 

(display (caar NextDevice)) 
(display OF THE ) (display DName) 
(display DEVICES. ) (newline) 
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) 



(display 
(display 
(display 
(display 
(newline) 



(display OR SEKSOR MUMBER 

(display (caar NextDevice) ) 
(display (cadar CurreatDcvice) ) 
(display HAS FAILE33 — ) (nawii„«i , 
;; The devices concain «iore ch^''i^:Lir 
\Ls±l * censor h« faiJS^" 

(display SENSOR HDMBER ) 

(display (caar NexLOevice) ) 
(display (cadar CurrencDevice) ) 
(display HAS FAILSD ) (newline) ) 

In this case more chan 1 SPRT in IiS!i L 
the devices has cripped, thereSrl we caS 
(begir*" device ha. failed! 

DEVICE NUMBER ) 
(caar NexcDevicc) ) 
OF THE ) (display DName) 
DEVICES HAS FAILED 1 
) I ) 

Nexc we check co £ee if the curreac device 
concains Gripped SPRTs while the previous and 
next devices don t. - 
(and ( (length CurrentDevice) 0) 

(eq? (length PreviousDevice) 0) 
(cq? (length NextDevice) 0) ) 
If only one SPRT has tripped, then we can t 
conclude a failure, only that failure of the 
current device or a sensor is possible 
(eq? (length CurrentDevice) 1) 
(begin 

*** DEVICE NUMBER ) 
(caar CurrentDevice) ) 
OR DEVICE NDMBER ) 
(caddar CurrencDevice) ) 
OF THE ) (display DName) 
DEVICES, ) (newline) 
SENSOR NDMBER ) 
(caar CurrentDevice)) 
(cadar CurrentDevice)) 
, OR SENSOR NUMBER ) 
(caddar CurrentDevice) ) 
(cadar CurrentDevice)) 
MAY BE FAILING ) (newline) ) 
In this case, more than l SPRT in the 
current device has tripped. Therefore we 
/; can conclude that the current or the next 
/; device has failed, 
(begin 

DEVICE NUMBER ) 
(caar CurrentDevice)) 
OR DEVICE NUMBER ) 
(caddar CiurrentDevice) ) 
OF THE ) (display DName) 



(if 



(display 
(display 
(display 
(display 
(display 
(display 
(display 
(display 
(display 
(display 
(display 
(display 
(display 



(display 
(display 
(display 
(display 
(display 
(newline) 
(display 
(newline) 



DEVICES HAS FAILED *•» ) 

) ) ) ) 

The last step is to update the PreviousDevice variable 
(setl PreviousDevice CurrentDevice) )))))) 



NaraeTrippedSPRTs procedure - This internal procedure takes a list 
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trioped SPRTs *nd converts each number oC the tripped SPRT into the SPRT 
nlmS te Q A 1 B I ia the corresponding SPRT name for tripped SPRT ll . 
The output' is a list of NDevs elements. Each of the elements contain* 
Che name of tripped SPRTs for the corresponding devxce number (e.g.. the 
Ird element contiins the names of the tripped SPRTs for devxce C . If 
none of the SPRTs for a device have tripped, then the corresponding ele- 
menc is null. This procedure is applied only co devxce groups chac 
, , concain 3 or more devices . 
(define KameTrippedSPRTa 
(lambda (NDevs SPRT List) 

;; Create locaJ. list to store output data. 

^A^do^'liop islsid to steo through each of the devices, from 
device A to device NDevs. The loop variable, IDev. is the currenc 
; ; device number . 

(do ( (IDev 1 IDev 1)) ) ^ ^ 

[ { NDevs IDev) (reverse DevLisc) ) ; Reverse order of oucpuc. 

(sec! DevLisc^ following unnamed function to each of the 

elements in SPRT List. Any null elements are removed 
from the lisc returned by map. Finally, the recumea 
lisc is added Co DevLisc - 



"RemoveNuil ; Call function to remove nulls. 

(man ^ * ■ 

(lambda (SPRT) ; Unnamed xntemal Cunccxon. 

(if (ea? (modulo SPRT NDevs) (modulo IDev NDevs)) 
; ; " If the current element in SPRT^Liat is a 
;; multiple of IDev, Chen: 
Uf (eo? (modxilo SPRT NDevs) 01 

; ; " In this case the devices in the SPRT are 
device A ania device NDevs . 

t^is^ ... 

Recum list contaxnxng: letter ref- 

ering to first device in the SPRT, 
(ascii- symbol C+ NDevs 64)) 
;; number ref ering to the sensor, 
(quotienc SPRT NDevs) 

the Icccer of the second device, 

A 

;; and the sensor number agaxn. 
{cuocient SPRT NDevs) ) 
;; 'Else, 

;; Recum lisc contaxnxng: letcer ret- 

;; ering to first device in the SPRT, 

(ascii- symbol {'^ IDev £4)) 

;; number ref ering to the sensor, 

(♦ (quotienc SPRT NDevs) 1) 

the letcer of the second device, 
(ascii- symbol (t- IDev 65) ) 
;; and the sensor number again. 
(♦ (quotienc SPRT NDevs) 1) ) ) ) ) 
SPRT List ) ) 

;; Add result from RemovcNull to DevLisc. 

DevList ))))}) 

; ; RemoveNull procedure - This internal procedure recursively removes the 
) ; null elements from an input lisc CLstl . 
(define RemoveNull 
(lambda (Lst) 
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(If (aull? Lsc) 
0 

(if (null? (c*r Lst)] 

(RemoveKull (edr Lsc) ) 
(cona (car Lsc) 

(Removemai (cdr Lsc|) 



) ) 



; If end of Lst is reached 
; recum null. 

; If lsc elemenc in Lac ia null, 
; ignore ic. 

Elae^add lac elemenc co oucpuc. 



DisplaySPRTs Procedure • This inccmal procedure oucpuca che mtnf «^ 
Che cripped SPRTa in Lac. For each cripped SPRT uHed iTL^L 
cedure decerminea che name (e.g.. Al-juror Al-ail of che sSi' ^ 
vnricea ic co che acreen. ^ 
(define DiaplaySPRTa 

(lambda (MDeva KSena Lac) 

(begin 

;; In chia caae. che laac SPRT fAN-Al] haa c-'^DDed 
(display A ) (display NSens) (display -Al )"* * 
; ; Display criped SPRTs in che remaizxder of che list 
(DisplaySPRTs KDeva KSens (cdr Lsc) ) ) 
(begin 

;; SPRT number AX-AX*X. where X is che firac numbe- in 

Che list, has cripped. 
(display A ) (display (car Lsc) ) (display -a ) 
(display (* (car Lsc) D) (display ) ' 
;; Display cripped SPRTs in che remainder of che lisc 
(DisplaySPRTs NDevs KSens (cdr Lsc) ) ) ) ) 
((eq? NDevs 2) ; Case for dual device SPRT 

(if (eq? (car Lsc) (• KSens 2)) 
(begin 

;; In chis case, che laat SPRT [AN-Bl] has cr^coed 
(display A ) (display NSens) (display -Bl ) '* 
;; Display tripped SPRTs ia the remainder of the lisc. 
(DisplaySPRTs NDevs NSens (cdr Lsc)) ) 
(begin 

(display A ) 
(if (even? (car Lstl ) 
(begin 

;; SPRT number AX-BX+l, where X is the first number 
;; in che lisc divided by 2, has tripped, 
(display {/ (car Uc) 2)) (disolay -a') 
(display (/ (car Lsc) 2) l)) ) 
(begin 

;; SPRT n\imber AX-HX, where X is .5 ♦ che firsc num- 
;; ber in the lisc divided by 2, has cripped. 
(display (+ (quocient (car Lsc) 2) 1)) 
(display -B ) 

(display (^ (quocienc (car Lsc) 2) 1)) ) ) 
(display ) 

;; Display cripped SPRTs in che remainder of che lisc. 
(DisplaySPRTs NDevs NSens (cdr Lsc)) } ) ) 

^*^f # / , , ^ , , . ' multiple device SPRT. 

(if (eq? (modulo (car l*ac) NDeva) 0) 

; ; If Che cripped SPRT ia a mulciple of the number of 
;; devices, then che SPRT number ia NX-AX. where N ia che 
; ; number of devicea, and X ia che aenaor number, 
(begin 

;; Letcer repreaencing device N. 
(display (ascii- symbol (t- NDevs 64))) 
;; Number of che sensor. 
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(display (quoci«at (car L«c) ND«v«)) 
; ; X-etcer repreaeaciag device A. 
(display --il-) 
;; Humber ot Che sensor, 
(display (quocienc (car Lsc) NDevs)) ) 
(begin 

;; It the cripped SPRT is noc a multiple ot the nximber ct 
;; devices, then the number of the first device is given 
; ; by the remainder of SPRT/MDevs . 

; ; Laccer represencing f irsc device in tripped SPRT. 

(display (ascii->symbol (t> (modulo (car Lst) HDevs) 64))) 

; ; number of the sensor . 

(display (♦ (quotient (car Lst) NDevs) 1)) 

(display --■) 

;; Letter representing second device in tripped SPRT, 
(display (ascii->symbol («- (modulo (car Lst) KDevs) 65))) 

Number of the sensor, 
(display (♦ (quocienc (car Lsc) NDevs) D) ) ) 
(disDlay • ") 

Display tripped SPRTs in the remainder of the list. 
(DisplaySPRTs NDevs NSens (cdr Lst) ) ) ) ) ) 



(if 



Main body of Analyse procedure. 

The Analyse procedure is passed input data and tripped SPRT data super 
lists. Each element of these liscs contains the input data and Use of 
tripped SPRTs for a corresponding group of independent SPRTs. This por- 
tion of Che proced\ire is a control roucine which each cletacnc of the 
sut3er liscs to the AnalyzeOroup procedure. 

(niai? SPRT List) ; Q^it if end of list is reached. 

St 

(begin 

(Analy^eGrouD (car GroupList) 
(car SPRT_Usc) 
GroupCount) 
(Analyze (cdr GroupList) 
(cdr SPRT^List) 
(^ I GroupCount) ) ) ) 



Analyze 1st element of the lists. 



Analyze remainder of the lists. 



End of the Analyze procedure. 
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What Is Claimed Is: 

1 A method of testing both an industrial process and a sensor for detennining fault 
conditions therein, comprising the steps of: 

detennining automatically, using computer means, a configuration of a minimum 
number of sensor pairs needed to test the industrial process and the sensor for state of 
operation; 

operating at least a first and second sensor to fonn at least one sensor pair to 
redundantly detect at least one physical variable of the industrial process to provide a first 
signal from said first sensor and a second signal from said second sensor, each said signal 
being characteristic of the one physical variable; 

obtaining a difference fimction characteristic of the arithmetic difference pairwise 
between said first signal and said second signal at each of a plurality of different times of 
sensing the one physical variable; 

obtaining a frequency domain transformation of said fu^t difference fimction to 
procure Fourier coefficients corresponding to Fourier frequencies; 

generating a composite fimction over time domain using the Fourier coefficients; 

obtaining a residual fimction over time by detennining the arithmetic difference 
between the difference fimction and the composite fimction, the residual fimction being 
substantially free of serially conelated noise; 

operating on the residual fimction using the computer means for perfomiing a 
statistical analysis technique to detennine whether an alarm condition is present in at least 
one of the industrial process and the sensor, the residual fimction including white noise 
characteristics of an uncorrelated fimction of reduced skevraess relative to the diffirrcnce 
fimction and being input to the statistical analysis technique; and 

said at least one sensor pair providing alarm infonnation to an operator of the 
industrial process allowing modification of at least one of the industrial process and said at 
least first and second sensor when an alaim condition is detected. 
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2. The method described is Claim 1 wherein said computer means comprises an artificial 
intelligence system. 

3. The method as defined in Claim 1 wherein the residual ftmction comprises reduced 
Markov dependent noise. 

4. The method as defined in Claim 1 wherein the industrial process comprises at least 
one of a chemical process, a mechanical process and an electrical operational process. 

5. The method as defined in Claim 1 wherein the step of obtaining Fourier coeflBcients 
comprise iteratively determining the minimum number of Fourier harmonics able to generate 
the composite ftmction, 

6. The method as defmed in Claim 1 fiirther including at least one of the steps of 
modifying the industrial process or changing the sensor responsive to the alarm condition. 

7. A method of testing both an industrial process and a sensor for determining fault 
conditions therein, comprising the steps of: 

determining, using computer means, a configuration of a minimum number of sensor 
pair signals needed to characterize the industrial process and the sensor state of operation; 

operating at least a first sensor to detect at least one physical variable of the industrial 
process to provide a real signal from said first sensor; 

generating an artificial signal characteristic of the one physical variable; 

fomiing a sensor pair signal from said real signal and said artificial signal; 

obtaining a difference ftmction characteristic of the difference pairwise between said 
real signal and said artificial signal at each of a plurality of different times of sensing the one 
physical variable; 

obtaining a frequency domain transformation of said difference ftmction; 
generating a composite ftmction over a time domain; 

obtaining a residual function over time by determining the difference between the 
frequency transformed difference function and the composite function; 
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operating on the residual function using the computer means for pcrfonning a 
statistical analysis technique to determine whether an alarm condition is present in at least 
one of the industrial process and the first sensor, the residual function including white noise 
characteristics of an uncotrelated signal of reduced skewness relative to the difference 
fiinction and being input to the statistical analysis technique; and 

said first sensor providing alarm information to an operator of the industrial process 
allowing modification of at least one of the industrial process and the first sensor when an 
alarm condition is detected. 

8. The method as defined in Claim 7 wherein the step of obtaining a frequency domain 
transformation comprises performing a Fourier transformation. 

9. The method as defmed in Claim 7 wherein the steps of obtaining a composite fimction 
over time comprises performing an auto regressive moving average analysis. 

10. The method as defined in Claim 7 fiirther including die step of determining a 
difference function for both the artificial signal and the real signal, as weU as a separate pair 
of real signals. 

11. The method as defined in Claim 7 wherein the residual fimction comprises reduced 
Markov dependent noise. 

12. The method as defined in Claim 8 wherein the step of obtaining a frequency domain 
transformation comprises obtaining Fourier coefficients iteratively to determine the 
minimum number of Fourier harmonics able to generate the composite fimction. 

13. A system for automatically configuring sensors for testing both an industrial process 
and a sensor for determining a fauh condition therein, comprising: 

computer means for automatically configuring a minimum number of sensor pair 
signals needed to characterize the industrial process and the sensor state of operation; 

at least a first sensor to detect at least one physical variable of the industrial process 
to provide a first signal from said first sensor; 
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first means for generating a second sensor signal for comparison with said first signal 

from said first sensor; 

second means for determining a difference function characteristic of the arithmetic 
difference pairwise between said first signal and said second signal at each of a plurality of 
different times of sensing the one physical variable; 

third means for obtaining a residual fimction over time by means for deter minin g the 
arithmetic difference between the difference function and the composite function, the 
residual function including white noise characteristics of an uncorrected signal of reduced 
skewness; 

fourth means for operating on the residual function, said fourth means mcluding the 
computer means for executing a computer program for performing a statistical analysis 
technique and for determining whether an alarm condition is present in at least one of the 
industrial process and the sensor and with said second means, said third means, and said 
fourth means cooperatively providing a function comprised of said white noise 
characteristics of uncorrelated signal of reduced skewness relative to the difference function 
as an input to the statistical analysis technique; and 

means for providing information allowing modification of at least one of the industrial 
process and the sensor when an alarm condition is detected. 

.14. The system as defined in Claim 13 further including means for obtaining a frequency 
domain transformation of said difference function. 

15. The system as defmed in Claim 13 wherein said computer means comprises an 
artificial intelligence system. 

16. The system as defined in Claim 13 wherein said means for generating a second signal 
comprises the computer means for executing a computer program. 

17. The system as defined in Claim 16 wherein the computer program includes an 
autoregressive moving average procedure. 



wo 97/14105 

gQ PCT/US96/16092 

IS. n.. sys,™ « d.a,.d in Cl-ta, 13 whe™, d,c ^ hcMes „ Ics. on. p«, „f 
sensors for detecting each of the physical variables. 

19. The system as defined in Clain, "wherein said computer means e«cutes a compute, 
program mcluding a statistical probabiUty ratio test on the residual fcnction 

20. Ue system as defined in Claim .3 fi^ including means for changing ., least «,e 
of the mduslrial process and substituting another sensor for a defective sensor 



wo 97/14105 PCT/US96/I6092 

1/13 






-O.fOJ - 

6 20 40 50 80 100 120 

Time, min 



wo 97/14105 



PCT/US96/16092 




wo 97/14105 



PCT/US96/16092 



3/13 




POWEH, kTi 



wo 97/14105 



4/13 



PCT/US96/16092 



100- 



-100- 



lOO 



;50 



200 




wo 97/14105 



PCT/US96/16092 

5/13 




wo 97/14105 



6/13 



PCT/US96/16092 



DATA COLLECnOM 



.^EOUENCV-OOHAIN ANALYSIS 
OF OIPriRENCE rjNcnoN 



SET I=i 



fOURIER-COHPOSITE CONSTRUCTION 
USING '< HIGHEET FOURIEx MOOES 



niBLNG OF SERIAL CORRELATION 
USING FOURIE.R COMPOSHE 



NONWHITE I nSKER KAPPA TEST FOR ROBUSTNESS 
! ON RESIDUAL "•JNCTION 



1 WHEE 



MHIai .<0LMOGOROV-3:'^IRN0V TEST FOR 
i I 'IfHITECSS ON RESIDUAL FUNCTIOI 



; mil DATA 



^ NONGAUSSIAN 0"ANGCSTINA-=EARSON TEST FOR ^1 
I •HHITE'iESS ON RESIDUAL FUNCHON \ 



AUTO 



I GAUSSIAN 



CORRFlATED I RUN-]F-SIGNS TF;t m vmm tty 
I ON RESIDUAL FUNCTION 



\ WOT AUTO CORRELATED 



STORE AMP'JTUOE. PHASE AND FREOUEHCV 
CONTAIHED IN FOURIER COMPOSITt 

I 

T 



J 



wo 97/14105 



7/13 



PCT/US96/16092 



833 

(7 



PHASE I DATA 



i CONSTRUCT SaiALLY CORRELUED 
I COMPONENTS USING PHASE I INFORMAHON 



irZL'tR SBIAL CORRELATION FROM SIGNAL 
I TO OBTAIN RESIDUAL F^JNCTION 



e:(peht sYSTty 



wo 97/14105 



8/13 



PCT/US96/16092 




wo 97/14105 



PCT/US96/16092 



9/13 




wo 97/14105 



10/13 



PCT/US96/16092 




wo 97/14105 



11/13 



PCT/US96/16092 




wo 97/14105 



12/13 



PCT/US96/16092 




wo 97/14105 



13/13 



PCT/US96/16092 




Figure 



System of Industrial Devices for the Test Calculation 
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